We’re rewarding the question askers & reputations are being recalculated! Read more.

Hot answers tagged

7

Akismet - libraries: First I want to mention that there are many Akismet libraries out there: http://akismet.com/development/ and here are the API documents: http://akismet.com/development/api/ Akismet - WordPress plugin: But as I understand it, you want to use the Akismet WordPress plugin as your library. The following code snippet is a simple proof ...


5

The incoming links widget is asking Google for links to the domain you’re on right now. If your domain is localhost you get a lot of links – because that’s a very common domain name. Unfortunately, some people don’t clean up their data when they move from localhost to the world wide web, and then Google will find these links. :) Nothing to worry about.


5

Use Antispam Bee. It is free, doesn’t phone home, and it works surprisingly well as long as you dont change the comment form too much (you have to test it). Just make sure you disable the mail notification for spam comments. :)


5

I won't repeat any of the good advice in Squish's answer. You should also read this article on Wordpress security. I'm just going to cover the specifics of what I learned from my episode. My attack is a kind of black hat SEO known as "hideMeYa": http://siteolytics.com/black-hat-seo-technique-demystified/ Basically, the attacker slips a bunch of hidden ...


4

This can be solved using the Bulk Edit WordPress functionality. and Change the number of items to be shown in Screen Options, so you can select all posts/pages at once. Two things worth noting in the Q&A pointed by @BartKarp: There is the option to turn off trackbacks/pingbacks under Settings > Discussion. it has a link to a plugin by @...


4

You don't need a form to submit a comment to the wp-comments-post.php file, or to send a pingback or trackback. Spammers don't use forms, they simply send their spam directly. Removing the form doesn't "turn off" comments. To do that, go to the Posts screen, and use the Quick Edit to actually disable comments and trackbacks for the various posts. Also visit ...


4

There is definitely a performance advantage in keeping your comment spam to a minimum. If you have a lot of comments, the query time can get pretty out of control. To make it easier, you should install Akismet if you haven't already. Akismet will automatically detect spam comments and move them to WordPress spam section. You can then delete all the spam ...


4

If you don't want people filling website field, simply remove it from the form. Put this code in functions.php of your current theme: function wpse_remove_comment_url($fields) { unset($fields['url']); return $fields; } add_filter('comment_form_default_fields', 'wpse_remove_comment_url'); It is more logical than showing the field and advising users ...


3

They were probably automatically created by spam bots. You can disable user registration by going to the Settings > General page and unchecking the Anyone Can Register box. You'll still be able to manually create users, but users won't be able to register themselves automatically. If you want to allow users to register, but still avoid spam bots, you can ...


3

I would generally not recommend modifying files for Plugins that you do not control. Better would be to write your own site/custom Plugin, to control this hook: add_action('akismet_scheduled_delete', 'akismet_delete_old'); First, to stop the deletion altogether, simply call: remove_action('akismet_scheduled_delete', 'akismet_delete_old'); Then, you can ...


3

If you are using a twentyten/eleven theme, they hardcode the pingback meta tag into the head.php file. Remove that line or use your own theme. Also, and maybe it's only in multisite, but the X-Pingback header is sent along with the xmlrpc endpoint url as well. Removed with the following: /** * Remove the X-Pingback header, since pingbacks are disabled */ ...


3

Of course this is possible it would just require some custom coding. This is an open ended question so I'll give you an open ended answer of how I may go about this. Add phone number field to user contact Use the profile_update hook to store a random code associated with that number Create a verify phone number page Use Twilio or Tropo to send the user ...


3

I also use Akismet but rarely does a spam comment get thru. This is what i do. 1. If you remove the website url field from your comment form, you'll find this will reduce both automated and manual spam comments as spammers are only interested in leaving links. You can do this by installing a plugin or using code. 2. I also removed the comment form allowed ...


3

Disclaimer: I wrote parts of the Akismet WordPress plugin, though not the parts in question here. Is Akismet failing to connect to the Akismet service, notifying me, and retrying later? Yes, this is exactly what happens. If Akismet doesn't get a valid response from the servers, it reschedules the check for 20 minutes in the future. In the meantime the ...


3

In order to add a new comment you really only need a couple of fields and a POST method. In a typical comment form, requests are submitted to http://www.example.com/wp-comments-post.php which parses the $_POST data and sends it off to wp_handle_comment_submission. A POST method varies from a GET request in that params are usually sent in a non-visual way. ...


3

First of all, report whoever is doing it. You obviously could block anything with a query-string that contains screw-you, but that'll only help in this case. Maybe Drop any requests with HTTP/1.0 (browser don't use it, and "good" bots like google don't either, but if you need to provide access to special tools, you might not want to do this), but you ...


3

From WordPress point of view the most vulnerable part is resource–intensive loading of WordPress core and page generation. So for a primitive attack your priority is to never let these reach WP core. That would mean intercepting them at some stage before at web server, reverse proxy, or firewall level. Depends on server stack and configuration options ...


3

Just install a good anti-spam plugin. They will monitors site's comments for spam and automatically blocks spam comments. BTW WordPress come with Akismet which is a spam protection plugin installed by default. To enable the plugin, go to the Plugins and activate the Plugin. Akismet Anti-Spam


3

I'd actually recommend that you disable comments for now. I know that as a new user, you are thrilled to get a response but my experience shows that quality comments only come after you have established yourself. In the beginning of your career as a blogger or website owner, it is ususally just tons of spam you get. If you really want to keep the comment ...


3

That table is from the redirection plugin, and isn't a part of WordPress Core. Deleting it should have no ill effects as long as you disable the plugin too. If you wish to continue using that plugin though, I recommend using the plugin authors support at https://wordpress.org/support/plugin/redirection/


3

I think there are two decent options here. Let WordPress keep its mail function, but hook in once or twice wp_mail() has several hooks that will be helpful for you to replace the built in behavior, which is basically to use php's simple little mailer. Here are a couple of those helpful hooks that I think you might use, since that's what you asked for: /...


2

The other way to stop bots is through the 'hidden input field' - i.e. a field that is hidden from view and is made obvious for screen readers that it shouldn't be used, but if it is filled out then the comment is ignored. wpmu.org have a good review of the Spam Destroyer plugin by Ryan Hellyer which should do just that as well as using a cookie.


2

To make this more WP-ish: function wpse_delete_trackbacks() { global $wpdb; $wpdb->query( $wpdb->prepare( " DELETE FROM %s WHERE `comment_type` = 'trackback' ", "{$wpdb->prefix}comments" ) ); }


2

Adjust the amount of visible comments in the Screen Options:


2

SQL Query DELETE FROM `wp_comments` WHERE `comment_type`="trackback" Run Query from this plugin: wp-dbmanager


2

This is done filtering the *_row_actions. For the Comments screen (/wp-admin/edit-comments.php) this is the hook: add_filter( 'comment_row_actions', 'comments_row_wpse_92313', 15, 2 ); function comments_row_wpse_92313( $actions, $comment ) { if( !current_user_can( 'delete_plugins' ) ) unset( $actions['quickedit'], $actions['edit'], $actions['...


2

The problem is the globals global $akismet_api_host, $akismet_api_port; are not available everywhere. I suggest calling your function in the "init" hook... add_action('init', 'myAkismetInit'); function myAkismetInit() { var_dump ( bm_checkSpam('') ); } Check out the Akismet API documentation. The other option is to use one of these wrapper classes: ...


2

I wasn’t sure if you meant users or commentators, so I took both. SQL The email is saved in $wpdb->comments in the column comment_author_email for comments. It is saved in $wpdb->users in the column user_email for users. To get the domain part from the email in comments, we can use: SELECT ( SUBSTR( `comment_author_email`, INSTR(...


2

Use these three plugins in combination: Cookies for Comments Simple Trackback Validation Akismet Ditch the captcha and math plugins, they're pretty much useless. The combination of these three is enough for most anybody, without having to put any problems back on the user.


2

You could hook intop pre_comment_on_post: add_action( 'pre_comment_on_post', function(){ if ( empty ( $_SERVER['HTTP_REFERER'] ) ) exit; }); But … be aware, not all requests without an referer are actually spam posts. Some firewalls and proxies strip this field. And most automated spam comes with a Referer field filled with the name of the ...


Only top voted, non community-wiki answers of a minimum length are eligible