WordPress.org

Ready to get started?Download WordPress

Forums

SPAM in Comments (11 posts)

  1. frugalwallets
    Member
    Posted 3 years ago #

    I think I am getting SPAM in my comments....I get several comments from one website. Is there something I can add so that they have to enter a verification code before the comment posts to prove they are a person?

    Frugalwallets.com

  2. frugalwallets
    Member
    Posted 3 years ago #

    What I'm looking for is a code to appear at the bottom that they have to manually input. I have my comments already set on moderation. I want them to have to enter a code of scribbled words in order to post the comment. Is there a way we can add this feature?

  3. esmi
    Forum Moderator
    Posted 3 years ago #

    The "scribbled words" are called captchas. They cause more problems than they solve and rarely (if ever) stop spammers.

  4. Dan Negrea
    Member
    Posted 3 years ago #

    @frugalwallets I have developed "Engage user & Anti spam" that adds an anti-spam secure challenge to your forms:
    http://wordpress.org/extend/plugins/retina-post/

    @esmi Why Google, Yahoo, Facebook or Twitter ask users to pass CAPTCHAs? Spam is and will be a big problem. What is needed is a solution to make spammer life harder without affecting the online users.

  5. Samuel B
    moderator
    Posted 3 years ago #

    capchas do affect users
    ask my mom who has a hard time seeing this crap
    if it has a capcha - she's outta' there

    good anti spam measure
    enable akismet and install
    http://wordpress.org/extend/plugins/cookies-for-comments/

  6. Gabe Young
    Member
    Posted 3 years ago #

    @Dan Negrea, those sites do not ask for a CAPTCHA every time you want to interact with someone. Imagine if Facebook required a CAPTCHA every time someone wanted to leave a comment on a status. Facebook would be dead by now.

    I would start with a simple, free plugin like Akismet. That should solve for 99% of spam for many users.

  7. Dan Negrea
    Member
    Posted 3 years ago #

    Gabe Young, yes, CAPTCHA should not be required every time. But when you are targeted by spam bots you eventually will have no choice.

    Have you had a look on my demo page http://blog.retinapost.com/demo ?

    PS: I see a lot of spam on FaceBook this days.

  8. MickeyRoush
    Member
    Posted 3 years ago #

    Gabe Young wrote:

    Imagine if Facebook required a CAPTCHA every time someone wanted to leave a comment on a status. Facebook would be dead by now.

    That's not a very good analogy (IMHO), as Facebook has the $ to deal with it in different ways and spammers are constantly finding new ways to spam there as well. I feel sorry for all of my Facebook friends who are tagged in an image of a pair of Nikes and other spamming links. Spamming and hacking on Facebook is getting to be tremendous. Since my main profession is cleaning up infected PCs I can't tell you how many times customers have complained about Facebook (including one who is a captain with the State Police), but that's another story.

    Gabe Young wrote:

    It's less about being lazy and more about the terrible user experience.

    But you have a point. After spending a lot of time researching this, no one has really complained on any of my sites, as they feel that a site is more secure when a captcha or other simple authentication is available. I've deduced it's comes down to the content, type of site you have, and traffic. Especially since it takes less time to complete a captcha than it does to fill out any other required field(s). So aren't you also giving the user a poor user experience if you require them to fill out any other fields, like 'Name' and 'Email'?

    Samuel B wrote:

    capchas do affect users
    ask my mom who has a hard time seeing this crap
    if it has a capcha - she's outta' there

    Ipstenu wrote:

    If they can read it.

    Captcha's aren't friendly to visitors with poor vision, and they're not usable (in many implementations) to people who rely on text readers.

    I believe some captchas have given others a bad rep. The ones like reCAPTCHA that are agreeably difficult to see at times. The ones that are easier to complete than those and take up less time to fill (like placing a check in a box) shouldn't be trivial. And if you can't see a simple captcha (I have poor sight as well), then you must be missing out on a lot more on my site(s) anyways.

    I'm sorry, if you can fill out your name and email, but cannot put a check in a box, answer a simple question, or fill out one more field (that is "legible"). then something is wrong here.

    Searching the Plugins database I have discovered options for those that don't want to use captchas or derivatives there of.

    I didn't list Cookies for Comments as I'm having an issue with it setting the cookie. It's probably due to a PHP setting that I have adjusted or disabled for security reasons. Also, Akismet is already included in the default install. Be forewarned these may also have obstacles that need to be adjusted for (eg Javascript).

    Anti-Captcha
    http://wordpress.org/extend/plugins/anti-captcha/

    Bad Behavior
    http://wordpress.org/extend/plugins/bad-behavior/

    Invisible Captcha
    http://wordpress.org/extend/plugins/invisible-captcha/

    SD Simple Antispam
    http://wordpress.org/extend/plugins/sd-simple-antispam/

    Stop Spammer Registrations Plugin
    http://wordpress.org/extend/plugins/stop-spammer-registrations-plugin/

    WP-BlackCheck
    http://wordpress.org/extend/plugins/wp-blackcheck/screenshots/

    On a side note, I've implemented my own and third party scripts at the server level to battle spam. Many do not get past those implements. But when they do, Bad Behavior has stopped them and is one my favorites.

  9. Gabe Young
    Member
    Posted 3 years ago #

    So aren't you also giving the user a poor user experience if you require them to fill out any other fields, like 'Name' and 'Email'?

    Not necessarily. First, many people actually want to provide name and email to build a reputation or create backlinks. Secondly, they don't have to input that info every single time.

    I believe there are some uses for CAPTCHAs, such as registering for a site. However, for basic comments on a new blog, there are a plethora of other plugins I would try first.

    Personally, I'd prefer 100 comments (with a handful, say 5, of them being spam) over having only 5 comments and no spam. That's what a CAPTCHA will essentially do to comments on a site.

  10. Dan Negrea
    Member
    Posted 3 years ago #

    Gabe Young, I rarely see posts with 100 comments. Usually I see a few comments (or no comment at all) and one, or two, spam messages.

    CAPTCHAs are especially good for people that don't want to spend time on sorting spam or visit the blog once in a while.

    Engage user & Anti spam is designed to make the test useful by displaying short messages instead of random letters. The user has to type only a few letters: two, three, max four. Even your name is longer then three letters.

  11. Gabe Young
    Member
    Posted 3 years ago #

    I'm not saying that your plugin isn't useful. I'm just stating that based on my experience, it's usually better to avoid CAPTCHAs or similar additional inputs that frustrate the users. There are so many other options that are passive that would serve the same purpose that can be done behind the scenes.

    BTW, I have plenty of articles with over 100 comments, some over 200. ;)

Topic Closed

This topic has been closed to new replies.

About this Topic

Tags

No tags yet.