[jwack]

Here is the link to the plugin in question
https://buddypress.org/community/groups/buddypress-activity-stream-bump-to-top/

[jwack]

Thanks for the replies, I’ll look into the plugin.

[jwack]

HAHA, glad I asked, I was over thinking this one. Thanks.

[jwack]

What, its not a css issue, I don’t want to hide 3/4 of the video, I want to not include videos at all. And I was under the impression recent posts was a buddypress widget?

[jwack]

any takers?

[jwack]

bummer, I guess I can attempt to make something.

[jwack]

Every morning I wake up, delete about 30 blogs and then delete the users. I will just learned how to check the access logs (I have my own server and just figured out how to check them lol) so I will pay attention to them and see what I can find out.

[jwack]

@lilyo Thanks for your help

[jwack]

I really like the idea of editing the plugin to make blog registrations require a password. I will take a look at the code but I already know its out of my league as well. Perhaps I will contact him on the main WP site and see what he thinks. That seems like it would be a useful plugin on its own.

[jwack]

@lilyo
Thanks for the response.
– I already changed the reg. slug in wp-config.php (this would do the same thing correct?
-That plugin would be awesome if it only allows blog creation with a special password, I want anyone to be able to register. You actually limit people to register on your site if they have a password?

[jwack]

WOW, I did the above mentioned items and I am still getting hammered with spam blogs. I have no idea what to do now, I am already making a sacrifice by taking away blog creation during signup.

Any ideas of what I can do?

[jwack]

hmmm, I don’t have email setup on my server. I have no experience with servers but have managed to learn enough to have my site up. I thought the point of mailFrom was to address the problem off servers not being configured correctly to send mail through WP?

[jwack]

I have my own server, I heard this issue is related to my server not being setup correctly to send mail? If I had more details I may be able to fix it there.

[jwack]

I have it setup with a gmail account, is that not good?

[jwack]

I didn’t notice the wp-signup.php, I am hopeful this will solve the problem, thanks!

[jwack]

anyone?

[jwack]

Deactivating plugins didn’t help. I have added the following items to .htaccess. The first rule is the problem but cookies for comments plugin says to add it to stop spam blogs.

#Cookies for comments
RewriteCond %{HTTP_COOKIE} !^.*XXXXXXXXXXXXX.*$
RewriteRule ^wp-signup.php – [F,L]

AND

# BEGIN ANTISPAMBLOG REGISTRATION
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{REQUEST_URI} .wp-signup.php*
RewriteCond %{HTTP_REFERER} !.mysite.com. [OR]
RewriteCond %{HTTP_USER_AGENT} ^$
RewriteRule (.*) http://die-spammers.com/ [R=301,L]
# END ANTISPAMBLOG REGISTRATION

[jwack]

I was just curious, wondering if spammers could use these extra signup files.

[jwack]

ne1?

[jwack]

You could use “BuddyPress Auto Group Join” plugin to force members to join an existing groups when they signup.

[jwack]

Thanks. How do you know if there human or bots?

[jwack]

That was the original post I seen, but then I seen
https://buddypress.org/community/groups/how-to-and-troubleshooting/forum/topic/buddypress-spam/?topic_page=5&num=15#post-74351
and there was another version floating around some where that was slightly different. As you can see this version just has .register* and then domainName.*

I wasn’t sure which was correct or how to check if its working. Have you ever successfully tested yours?

[jwack]

Anyone know how to check the above to confirm its doing what its supposed to?
Also, is the 3 supposed to be myslug, or register.php?
Is line 4, just domainName, or domainName.Com?

[jwack]

Well things were all good for a month, now I am getting slammed every night from 2-6am.

Can someone confirm this is correct (if my site were ebay.com and my registration page was myslug)…
‘
# BEGIN ANTISPAMBLOG REGISTRATION
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{REQUEST_URI} .myslug*
RewriteCond %{HTTP_REFERER} !.*ebay.* [OR]
RewriteCond %{HTTP_USER_AGENT} ^$
RewriteRule (.*) http://die-spammers.com/ [R=301,L]
# END ANTISPAMBLOG REGISTRATION
‘

Reading back a page or two this is supposed to redirect attackers, I tried entering myURL?something=something but it doesn’t do anything. How can I test this to make sure it working?

Thansk.

[jwack]

IMO, this would be an extremely successful plugin if made nicely. If your going to make one you might as well include droid users, they are growing in numbers very quickly.