Tell me more ×
WordPress Answers is a question and answer site for WordPress developers and administrators. It's 100% free, no registration required.
up vote 1 down vote favorite

I have a login safe application and it has hundreds of users. WordPress is a separate module of it and only used for blogging purpose [no other usage]. Both using the common database. The blogs are not for public but only for our users.

Recently I am getting spam comments to our blogs and I am worried about the blogs.

How I can make the WordPress totally private for our application users. All our users do not have WordPress login but are allowed to check the blogs and post their comments.

share|improve this question
If you already have "a login safe application and […] WordPress is a separate module of it", then Wordpress should be hidden behind the apps login. If someone has access to your plugged-in Wordpress, the he/she has also access to your whole application, or not?! – feeela Sep 13 '11 at 11:24
In my application wordpress is a separate entity. In my application I only used the link of blogs. I need that to be part of my application and should be visible after people logged in my application. – Thinktank Sep 13 '11 at 11:39

2 Answers

up vote 1 down vote

If your on a company intranet it might be easier/more secure to just whitelist a few IP's and deny access to everything else, you can do that with apache config or .htaccess. Otherwise you will have to get people to login and then you can use a plugin like "Members Only", there are several of these for private blogs.

share|improve this answer
My application is online...not in intranet. My users are accessing that from different cities. So IP blocking not possible, For "Members Only" plugin, how WordPress can identify my application users? It is not possible to create account in WordPress for each user. – Thinktank Sep 13 '11 at 11:41
Then you will have to get them to login, or create logins for them and email them the info. – Wyck Sep 13 '11 at 11:44
can I use any how our session Ids which are created during our application login? – Thinktank Sep 13 '11 at 11:49
No, WordPress does not use sessions, though I think there are some hacks that enable it. – Wyck Sep 13 '11 at 11:50
do you mean custom editing in php? – Thinktank Sep 13 '11 at 11:53
up vote 1 down vote

if you are worried about spams you should use a anti-spam plugin (Akismet comes by default you should configure it). For the session enabling and usage you wordpress session enabler (but i highly dough that it would be of much help). You can also use Registered Users Only, Members Only or registered users only 2 to force your users to login before the can access your blog if you can configure your app and wp use the same user db. And be sure that you have told wp to stay private and hidden from search engines some times that also helps against spam.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.