Search Results for 'spam'
-
AuthorSearch Results
-
May 11, 2015 at 11:35 pm #238956
In reply to: That Spam Option
modemlooper
ModeratorThe account is blocked and marked as spam, uses this https://codex.wordpress.org/Function_Reference/update_user_status
May 10, 2015 at 4:07 am #238907In reply to: Installed Buddypress but several things won’t work.
Moderatornever use “register” as url for sign up page. Spammers look for this. Go into permalink settings and change to something else sand save. URL redirects not right
April 29, 2015 at 11:52 am #238539In reply to: Error while posting update
jknowles
ParticipantIt is not Buddypress that is causing the error, but reflecting that a comment has been submitted that should be moderated because it looks like spam.
If you want all the links to go thru, go to the Dashboard/Settings/Discussion/Comment Moderation
and change the number of links it allows to 0. (Or maybe just up it to what you are comfortable with.)April 27, 2015 at 7:03 pm #238478In reply to: How to stop Spam Users from registering
djsteveb
ParticipantYou should of searched the forum for many answers to this already posted.
There are a lot of options and solutions with this… for me, I use the plugin “buddypress humanity” on one of my sites, and a different / similar plugin “good question” on another site.
Change the default questions and answers… this stops most of the auto-bot spammers.. a few manual people may get through, but it cut does spam signups on my site by 99%.
One of my sites I disable “group creation” for all users, as that seems to be a target for many of them.
I also use another plugin with my bp+wp / multi-site … which sets “blog defaults” so that any user who creates a new blog has settings automatically enabled that “block this site from search engine indexing” – if someone signs up and creates a site and adds original content, I will go in an manually change that setting.. most people who “create a site (blog on multi-site) – don’t use them, or are spammers – so I don’t need them sucking away page rank juice or clogging up the activity stream with BS.
random thoughts from another BP user…
April 20, 2015 at 4:07 pm #238103In reply to: Made custom register page, now honeypot doesn’t work
juliantrueflynn
ParticipantYes to the first, no to the 2nd — to be direct, not sure you’re following…
You just gave steps for overall spam reduction (which, thank you), what I’m referring to is a problem that occurred from the custom registration page. I’m talking in the matter of an hour I went from no spam to lots of spam because of the custom registration page which code I gave above. What would cause that and how can I fix it?
Why would this custom page cause the issues and why would the Honeypot plugin you gave not fix it or my old code — it’s doing the same thing I had before that worked perfectly? I could remove the custom registration page and the spam would stop, but I rather keep it though since I don’t want the default registration page.
April 20, 2015 at 12:50 am #238075In reply to: Made custom register page, now honeypot doesn’t work
ParticipantHm, so I added that plugin first to see if that would do anything. The spam requests are still very high (user spam sign-ups). Again, I’m just comparing this to before I did the new custom registration page – the code I put above in codeshare.io.
April 19, 2015 at 5:32 pm #238047In reply to: Group Moderator broken?
danbp
ParticipantShouldn’t a User promoted to Group Moderator be able to moderate content in that Group, regardless of their WP Role and capabilities?
Sounds logic, but No. See documentation in bp-core/bp-core-caps.php for the “why”. 😉
Since BP 1.6, group moderators can only delete, move, spam group forum content.
April 17, 2015 at 1:27 pm #237974S. Panda
ParticipantThanks for the reply, unfortunately that patch didn’t help. Here’s what I have in wp-content/plugins/bbpress/includes/extend/buddypress/activity.php:
// Get the activity stream item, bail if it doesn't exist // ===== BBPRESS BUG WHICH RETURNS DUPLICATE ===== // ===== bbp_reply_created UPON EDITS ===== // $existing = bp_activity_get_specific( array( 'activity_ids' => $activity_id, 'show_hidden' => true, 'spam' => 'all', ) ); // if ( empty( $existing['total'] ) || ( 1 !== (int) $existing['total'] ) ) // ===== END BUGGY CODE / START PATCH ===== $existing = new BP_Activity_Activity( $activity_id ); if ( empty( $existing->component ) ) // ===== END PATCH ===== return null; $existing = new BP_Activity_Activity( $activity_id ); if ( empty( $existing->component ) ) // Return the activity ID since we've verified the connection return $activity_id; }April 14, 2015 at 5:37 pm #237878In reply to: Remove Email requirement
Participanthi @dani-girl,
intersting question, but thought you’re wrong about Directive 95/46/CE. You have a too strict opinion ! If it would be real, nobody in Europe couldn’t use WordPress and probably also many other CMS’s.
Which is the EU country you are off ?An e-mail is a personnal data and the directive applies. But…
WordPress need it (username, email and password) to work on registering. That is a legitimate and technical reason, which is allowed.
You don’t collect it illegaly, or by roundabout and the user has access to it any time. Emails never appear publicly on WP and are used for internal purpose only.
Opt-in is mandatory since 2002 in Europe. This means you have to prevent/ask the user before he sign in.
If you clearly write and expose publicly (and easy to access) your policy, explain why you ask the mail, that you freely remove any user data on demand for example, you can ask for an email. This is also valuable for cookies. You should inform the user that you use them… Resaling and forwarding emails for commercial purpose is of course forbidden, but only IF your site has no direct reason to do that. (e-commerce is not a direct reason 😉 )On the other side, as site owner, you can’t use your members email for advertisement or any other mailing action without their agreement. Or you will be considered as spammer. Which is also illegal in EU.
April 12, 2015 at 11:33 pm #237781In reply to: Hello. BP Activity Stream
nblxhd
ParticipantKleo Theme.
— WordPress Active Plugins
bbPress: 2.5.6
BP Group Organizer: 1.0.8
BuddyPress: 2.2.1
BuddyPress Activity Shortcode: 1.0.2
BuddyPress Cover Photo: 1.0.5
BuddyPress Edit Activity: 1.0.4
BuddyPress Like: 0.2.0
Buddypress Messages Spam Blocker: 1.1
BuddyPress Toolbar: 1.6.0
CodeStyling Localization: 1.99.30
GD bbPress Attachments: 2.2
iThemes Security: 4.6.12
K Elements: 2.4
NextScripts: Social Networks Auto-Poster: 3.4.16
Paid Memberships Pro: 1.8.2.2
Peter’s Login Redirect: 2.8.2
Revolution Slider: 4.6.5
rtMedia for WordPress, BuddyPress and bbPress: 3.7.35
Social Articles: 1.8
Taxonomy Metadata: 0.4
WangGuard: 1.6.2
WooCommerce: 2.3.7
WordPress Importer: 0.6.1
WordPress SEO: 2.0.1
WPBakery Visual Composer: 4.4.2
WP Super Cache: 1.4.4
YITH WooCommerce Wishlist: 2.0.5PHP Version: 5.2.17
MySQL Version: 50617
Webserver Info: Apache/2.4.9-0-beget (Unix)### End System Info ###
April 10, 2015 at 3:56 pm #237623In reply to: Member List Showing 4,000 Extra Members
Alice-Claire
ParticipantThanks for the links. The thing is, they aren’t showing as members. That’s the strange part. I was getting hit with mega spammers and then I added a few things, including a captcha, and it stopped. No more spammer accounts were being created.
However, it does appear like they’re still building in the background somewhere, but I don’t where? They don’t show up as registered or pending members anywhere. So our member page is showing something totally different than our dashboard log.
Any ideas?
April 10, 2015 at 3:33 pm #237621In reply to: Member List Showing 4,000 Extra Members
rosyteddy
ParticipantA similar topic : https://buddypress.org/support/topic/removing-thousands-of-spam-users/
April 10, 2015 at 3:31 pm #237620In reply to: Member List Showing 4,000 Extra Members
ParticipantApril 8, 2015 at 1:56 pm #237483In reply to: Extraordinary amount of spammers signing up
ParticipantWide subject and several answered on this forum.
Askimet covers comment spam and doesn’t avoid clever spam bots to hit directly the DB.
Basic recommandation is to use table prefix different of the classic wp_. This calms down most bots.
A closed door is always a challenge for any spammer. WP is not fort Knox and depending your host, what YOU did and many other security details, this has no end in fact. If your site is Facebook, you’ll probably receive more spam than if it would be mykittycat homepage. Glory has a price ! 😉
Some htaccess rules against reputated spam server and one or to plugins aside what exist natively in WP should be enough to protect you a little from massive spam.
For example: buddypress honeypot + ban hammer for BP
or more simple and rought
http://mattts.net/development-stuff/web-development-stuff/wordpress/buddypress/anti-spam-techniques/registration-honeypot/… + searching this forum, maybe you can find more tips. 😉
April 7, 2015 at 10:13 pm #237419Participantallowing users to upload to your server some documents is a very bad idea while the registration process.
When a user register, you don’t know if he’s a human or a spam bot.
That’s why a newly register user is only pending and why he has to return an activation key before it is considered as a site member.
Or the site admin can ban him during the pending time, for some reason.
As long as you don’t be sure, a minima, of your new member, don’t allow him anything except viewing the site.You’re talking about pdf, doc and docx, but on the register page nothing appears about what type of file they have to upload (as it is required) and for what !
Here you’ll be able to upload images. Try it out now! is a bit vague. And i don’t think that BuddyDrive is intended to be on the register page.
BuddyDrive is a per member based plugin and can be used on a profile or in a group. As long as a member is pending, meaning doesn’t really exist, it cannot work.
March 26, 2015 at 11:16 pm #236704In reply to: Double entries
bluedawg
ParticipantI was getting a lot of those entries before I got email registration activation working. turns out there was a conflict with another plugin and that’s why I was getting the invalid activation key error. Since I got that working I have not gotten any more spam signups but I’ll keep an eye out. I only have the live site – no local install.
I have another question about formatting profile pages – Mine look terrible. Maybe I did something along the way to break them. I have been working feverishly at this for days but I will start another thread for that new topic 🙂
March 26, 2015 at 11:08 pm #236703In reply to: Double entries
ParticipantSeems to be spammers, but IMHO, there is another problem if you receive 2 mails for each new user.
Disallow user registration on live site and do some test on a local install before reoppening registry.
Change also your DB tables prefix. Don’t use wp_ ! This will calm down most spammers for a little while.
March 26, 2015 at 10:51 pm #236699In reply to: Double entries
ParticipantInterestingly when I set up users myself abd registered them I only get one email notification that a new user has registered. but when others register I get a double notification. See attached screengrab. Could they be spammers?
Also on the activity page there is a double entry of their join date with one being squished off to the right side… also see attached screen grab:
March 22, 2015 at 7:43 pm #236396In reply to: Private message sent to admin e-mail
ParticipantAny ideas on what may have caused this ?
That question was answered here.
It’s the user who did it wrong, so guess there is no technical solution.
The “from” wordpress@mysite.com is a default address which redirect to site admin address (the one you indicate when you setup WP).
This can (and should be) changed, as its a common trick used by spammers. Read here how to do this.
March 18, 2015 at 8:51 am #236185In reply to: Users are Automatically Activated
angslycke
Participant@danbp True indeed, but with my previous setup with BuddyPress 1.9.2 I was able to control the spam registrations since they were never activated (I used BuddyPress Pending Activations to manually activate new users) and therefore they could never log in. They were not seen in the activity stream either.
This is my setup: https://buddypress.org/support/topic/create-private-membership-site-with-buddypress/
I’ve now upgraded s2Member which had no effect, and also deactivated the BuddyPress Automatic Friends plugin which didn’t have any effect either. The new user shows up as pending in the Users screen for about 1 minute after registration, but is then automatically activated.
March 18, 2015 at 8:46 am #236184In reply to: Users are Automatically Activated
ParticipantSpam is an endless plague… and there is no radical solution, but only a set of combination for minimizing it, or at least to slow down that phenomenon..
For example, changing the default wp_ table prefix is a good practice which i would recommand to any site owner touched (or not yet) by spammers.
Even if you already use another prefix, but spammers found your site, you have to modify it again. Sounds a bit stupid, but the gain will be effective for a while.
Other tips are avaible on WP Codex.
In some case, you would prefer to use a plugin. See BuddyPress Registration Option.
But in any case, you have to found your own combination.
March 18, 2015 at 8:24 am #236182In reply to: Users are Automatically Activated
ParticipantHi!
I recently upgraded my site with a new theme (BuddyBoss Boss. theme) and am running WP 4.1.1 and upgraded from BuddyPress 1.9.2 to 2.2.1.
I have a setup where I redirect the activation e-mail to the site admin to be able to manually control new members and verify their information before activating them and letting them log in. This is a cruical function for my site since it’s a private network.
After the upgrade I noticed that some spam users were automatically activated and able to log in without my manual activation. The users are automatically activated, the same issue as @RussAdams is experiencing. I’ve tried deactivating a few plugins (BuddyPress Pending Activations, BuddyPress Auto Group Join) but this issue persists. In BuddyPress 1.9.2, everything was working as expected.
Browser sessions doesn’t seem to be the issue since clearly people on other computers have been able to create accounts which were automatically activated as well.
This is a very serious issue for my site since I no longer have the control over new users and spam users can log in after activating. Did you get this sorted out?
March 15, 2015 at 2:40 am #236030In reply to: Help setting up BuddyPress on WordPress site
@mercime
ParticipantI created a page for each component in this plug-in and I don’t know what to do next.
@dleit It depends. You could start adding Member Profile Fields and/or Create Groups and/or install Group and/or Sitewide Forums if you need forums.btw, spammers have been removed 🙂
March 14, 2015 at 2:15 am #235997ParticipantI found with one site on one server – any emails sending via php had a weird return header thing from my server that did not get through some of this big three email clients no spam lists..
a plugin similar to https://wordpress.org/plugins/postman-smtp/
may change your wp to send via an smtp account on your server instead of php using a weird default server header.. you may need to create an smtp account for that work.. and even so there are other factors that could limit your email getting through.. (some shared servers are on backlist, some web hosting companies are given minus points, even if your web site is on the up and up)
There are a lot of things that could cause it to fail the ‘real mail’ test at some of these services..
March 14, 2015 at 2:10 am #235996In reply to: My BuddyPress is spammed
ParticipantFor me, the plugin “good question” fixed 95% of spam regs.. similar to “buddypress humanity”…
-
AuthorSearch Results
