WordPress.org

Ready to get started?Download WordPress

Forums

Users able to post comments without registration (2 posts)

  1. scrow
    Member
    Posted 7 years ago #

    I recently installed WordPress 2.0.4 and I specifically turned-off new user registrations. Yet someone was still able to post a comment on my blog. His username does not show up under Users in Site Admin. Luckily I had comment moderation set which caught the spammer.

    Am I mis-understanding how WordPress handles comment posting or is there a possible exploit in 2.0.4?

    Please someone help restore my faith in WordPress.

  2. Chris_K
    Member
    Posted 7 years ago #

    Odds are, it was a trackback which is THE common way to acquire spam.

    http://codex.wordpress.org/Introduction_to_Blogging#Trackbacks

    If that was the case,
    <standard spam message>

    Install and activate Akismet -or- Spam Karma 2.
    Then install and activate Bad Behavior.

    http://akismet.com/
    http://unknowngenius.com/blog/wordpress/spam-karma/
    http://homelandstupidity.us/software/bad-behavior/

    For those who struggle with the Akismet
    directions: http://wordpress.com/api-keys/

    </standard spam message>

Topic Closed

This topic has been closed to new replies.

About this Topic

Tags