i think you should really check your site using that wordfence plugin as we both indicated having a user without an associated email is very suspicious.
just blank space huh? never seen that before not sure how its even possible unless as i said before your site was hacked and even then I’m still not sure how it’s possible. as far as i know every wordpress user account must be associated with an email address.
hmm i think i have also seen that before i forget exactly what it was but the address was invalidly constructed as i recall (meaning it was not the proper format you’d expect to see for an email). i have noticed that wangguard’s server(s) are not always available (probably get attacked with some frequency). whenever wangguard is not online the plugin just lets people pass but it is rather odd that someone should even be able to complete registration without a valid email.
you might not need any plugin at all (besides possibly jetpack or some other form submission thing). i think how i would do that is to close registration put up a request form then manually add members that you approve through admin.
when you say “has no registration ip” i’m assuming you are using wangguard or some other plugin to get that info. fact is there must be an ip it may be spoofed but regardless why not just ban whatever email they are using to register?
the only fields which show on the register page are the ones that belong to the “base” (unless you have renamed it) profile field group.
the non optional fields cannot be split you might be able to rename them however. you will find the option to add/define fields is under admin (network admin for multisite) > users > profile fields
i do like the notion of having a moderation tank as an option at least i’m just saying that i agree there could be some issues that wouldn’t arise in a simple comment scenario maybe a moderation message would handle that not sure.
i can give you a scenario, say person a signs up for your site and tells his/her friend hey this is a cool site check it out. person b goes onto the site to look at the activity or profile of person a and says hey i don’t see you on there whats up? person a responds, i don’t know maybe the site doesn’t work, person a and b both leave never to return the interesting but apparently broken site.
it is an interesting idea but i’m starting to think the flagging thing is the way to go and maybe something that should be considered for core (in addition to throttling) if we are trying to up our game. i think it’s important to remember that there is no perfect solution for spamming but as long as we can make the spammers lives more difficult and less profitable without impaction ux for normal visitors we will win this war by attrition.
it probably wouldn’t be liked but i can’t speak for anyone else. i do know that there is a general sentiment that the “buddypress” name should be reserved for official stuff only.
seems like major overhaul to the way aksimet works now but as i said before anything we can do to make spammers lives more difficult i’m basically for it.
giving members the ability to flag things as spam through akismet seems like a very sticky wicket to me probably something which would be better addressed as plugin. i for one would not want to give that ability to any user. i can barely get my staff to do that correctly under wordpress.
Well activity is already protected by akismet integration. Regarding the friend requests, one thing you can do now (and i have been forced to) to fight spam is only allow private messages to friends in that case the spammer gains the ability to send spam messages to these friends.
+1 for that, was my primary thought regarding the anti-spam functionality i was referring to. actually had a sort of deep thought about that the other day.
i think in todays landscape on the internet spam is becoming an ever increasing issue and without doubt buddypress sites/admins are bearing in inordinate brunt of that battle. Now that we have lowered the bar of entry there is (if we have our way) liable to be a lot more fresh targets for these malicious interests. Nothing dissipates the enjoyment (by admins or users) of a social network faster or more easily then spamming. Not to in any way subtract from the great strides that have already been made in this regard, we owe it to not only our own community but the internet as a whole to be proactive and step up our game in regards to making these leaches lives more difficult.
