Skip to:
Content
Pages
Categories
Search
Top
Bottom

Can't stop spam registrations

  • Avatar of Robg48
    Robg48
    Participant

    @robg48

    Hello,
    I’m running the latest versions of both WP and BP. I’m also using BP Xprofile Custom Fields Type, BP Security Check, and Spam Master – and I’m still getting nailed with spam – even with the BP Security Check working.

    Spam Master is blocking tons of it – mostly hotmail’s – but it still allows some hotmails through, as well as others that are on the “blocked” list.

    Tried just about every Captcha plug-in there is but they don’t seem to work with the Xprofile Custom Fields – and I really need to get first name, last, company, and title, as well as the standard username and email.

    I can get rid of the Xprofile plugin if there’s another way to get that information?

    Google reCaptcha doesn’t work at all. It shows up on the page but if you don’t fill it in it will still allow you to register.

    I’m completely stumped…these spam registrations are driving me crazy and I can’t stop seem to stop them!!!

    What is everyone else using/doing out there? Any ideas?
    Thanks!

Viewing 4 replies - 1 through 4 (of 4 total)
  • Avatar of henrywright
    henrywright
    Participant

    @henrywright

    @robg48 just a thought – try changing the name of your registration page. Spam bots automatically look for pages such as /register/ so maybe use /sign-me-up/

    Avatar of Robg48
    Robg48
    Participant

    @robg48

    Hey Henry,
    Good idea – didn’t even think of it!

    I changed it – I’ll post the results.

    Thanks!

    Avatar of Robg48
    Robg48
    Participant

    @robg48

    So far so good Henry – I can’t thank you enough man!

    Hope I’m not speaking too soon…but not one spam reggie – not even any blocked – in 75 minutes!

    Good deal :)

    Avatar of henrywright
    henrywright
    Participant

    @henrywright

    @robg48 something else you could do is use a honeypot. An example is

    http://www.pixeljar.net/2012/09/19/eliminate-buddypress-spam-registrations/

    It works by adding a hidden field to your registration form. Users can’t see the field so will never complete it (it will always be blank). Spam bots, however, don’t view the page in the same way as users. They ‘see’ the page source so will always ‘see’ the hidden field and try to complete it.

    On registration form submission, if the hidden field is blank then we know it’s a genuine user trying to sign up. If the field is completed then we know it’s a spam bot and we can halt the registration. Hence, the name honeypot.

Viewing 4 replies - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.