Support » Fixing WordPress » How to stop spam posted by "blank" author?

  • Up until now when a bot created a spam post i would make the bot a “subscriber” so he can’t keep creating new ones.

    Then i installed google’s re-captcha v2 on the registration page.
    These seem to have stopped spam posts.

    But now i have detected a new type of spam post: posts without an author!
    Now i can’t degrade anyone i can’t stop it, please advise…

    example:

    View post on imgur.com

Viewing 15 replies - 1 through 15 (of 15 total)
  • Moderator James Huff

    (@macmanx)

    Volunteer Moderator 🚀

    I think you’ve got a much bigger problem here.

    How, in the first place, are bots making posts on your blog? That’s not supposed to happen if you don’t allow it somehow.

    Are you using any sort of Post by Email plugin or functionality?

    Hi thanks for helping me solve this.

    When a user a register they have by default “contributor” status so they can submit posts but not publish them.

    When we find a spammer we degrade him to “subscriber” so he can’t send anything else. This system works well for us.

    With the use of recaptcha for registration we don’t have spam at all.

    Today i found this posts that have no author, so i don’t know who is creating them therefore i cannot degrade his account.

    Is there any way to tell who created these?

    I’m sure after they become simple subscribers they won’t be able to post anymore and bots are unlikely to bypass recaptcha v2. But first i must identify the offender account.

    Like James said, you seem to have a bigger problem here. Have you checked your site for any kind of infection?

    I haven’t. Any particular plugin that would do the job?

    Moderator James Huff

    (@macmanx)

    Volunteer Moderator 🚀

    When a user a register they have by default “contributor” status so they can submit posts but not publish them.

    Ok, that’s a very bad idea.

    Spam bots register on sites specifically to exploit that self-made loophole.

    Why are you allowing just anyone to post? Why not set the default role to Subscriber?

    Well, subscribers can’t do anything. I need users to be able to post under moderation. It was all good except for this new blank author posts.

    Moderator James Huff

    (@macmanx)

    Volunteer Moderator 🚀

    Ok, add this plugin into the mix: https://wordpress.org/plugins/stop-spammer-registrations-plugin/

    It’s pretty good at stopping spam registrations.

    Thanks, this will stop new offenders for sure, but what do i do about the ones that already registered?

    Moderator James Huff

    (@macmanx)

    Volunteer Moderator 🚀

    There isn’t much you can do besides completely delete their account.

    Unless you have some plugin that makes use of the Subscriber role (WordPress doesn’t have its own subscription system, despite the role’s name), there’s no reason to keep them around.

    Yes, but i don’t know who they are. The author comes up blank.

    Moderator James Huff

    (@macmanx)

    Volunteer Moderator 🚀

    Not entirely sure then. If you edit the post, does the author appear below the editor?

    If not, edit the post, hit the Screen Options tab near the top-right, check “Author” and then look below the editor.

    You could always banhis IP address server side, block his entire block.

    @james It shows the first person of the author list, but i doubt it was him.

    @artur But how do i know his IP?

    Moderator James Huff

    (@macmanx)

    Volunteer Moderator 🚀

    Are you using any post by email plugins or services?

    If so, I suspect it’s coming from them, possibly even just spam email hitting the post by email address.

    If not, then it sounds like someone has compromised your installation. Remain calm and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

    If hes still using the same IP from registering, you can view it within the wp_registration_log table. Ban it block wise and see if he returns. He might but maybe yiur lucky he wont.

Viewing 15 replies - 1 through 15 (of 15 total)
  • The topic ‘How to stop spam posted by "blank" author?’ is closed to new replies.