BuddyPress.org

What I can’t understand is how all the big time Buddypress sites don’t have the same heavy spam that little, unkown sites are experiencing. This site for example. Where’s the spam? Or testbp.org, where oh where is the spammmmm?! They are obviously doing something to block it. But what’s the secret, and why is it a secret??

Another way for lairbear to reduce spam on the activity page not to mention elsewhere is to go into his wp discussion settings and make it a requirement that anybody posting a comment be registered.

I would urge that you consider adding additional options for any member to take their activity page as well as their profile page private so that this doesn’t happen!

Activation key is generate key by wordpress and sended to the email of registred member. The new member must activate his account by clicking in the activation link ( the link contain the activation key)

Activation is used to detect if the email exist and blocking multiple registration by the same email ( spammer), and many others advantage ….

Direct messaging is disabled on BuddyPress.org (people kept spamming people). Since you mentioned @sbrajesh, he should have received an email notification. However I suggest you visit his site for support http://buddydev.com/

This is exactly what I have been trying to find an answer to. No one has seemed to provide a straight answer but this goes a long way. Thanks guys. I think I will reference this and work on this problem myself, too, and provide some feedback.

I think (not sure!) that one of the ways you can stop spam is to put required fields on the profile that utilize human input. Requiring fields like favorite color, or something where people have to actually input something may be helpful to slow down spam. At least, that’s a theory. Anyone have anything like that or provide some feedback on this theory?

– “neosolcafe.com/community” – That link goes nowhere.
– “activity stream redirects users off the site to view the links.” – you mean you have spammers posting off-site links in status updates?

@mrguythornton – Firstly, the mods are human too and do make mistakes, if they do mark it as resolved when your not confident that it is then just say so and @ one of them asking them to remove it. The mods are actually kind people (unless your a spammer). Also, not sure if your aware of this, but to mark a post as resolved the mods simply edit the title to say so – your welcome to remove it easily by clicking ‘edit topic’ and removing it. (if your the one who started the thread)

Anyways, now that that’s out of the way – “ is how you would get the URL to the loggedin user’s profile. (you’d have to code it deliberately though, i don’t think it’s easy to add it to WordPress’ custom menu.)

Something like this will (should?) work.
`<a href="”>Visit your Awesome Profile!`

Buddypress Humanity has worked really well for me.

Hi

There’s unfortunately no guaranteed solution to prevent spam user signup. There are a couple of easy things to start out with; try items 1 + 2 from http://themekraft.com/spam-in-buddypress/

“The most important plugin (imho) which is not available is new user moderation…”

In 1.6 the core devs have been doing some work on user capability stuff to make user moderation easier and mentioned that some of the changes will “give us more control over a users status and capabilities for later.” So, something like that ‘could’ end up in core *later*
See: https://buddypress.trac.wordpress.org/ticket/4038

But, their are wordpress’ plugins that might help keep non-authorised users out – eg. https://wordpress.org/extend/plugins/wordpress-mu-secure-invites/ & https://wordpress.org/extend/plugins/wp-invites/

Thats great Chris!

I also experienced my first registered spammer today, while I already took some precautions.
I’ve installed https://wordpress.org/extend/plugins/stop-spammer-registrations-plugin/ to stop spammers from getting in. The most important plugin (imho) which is not available is new user moderation…

A lot of small communities also use buddypress, and for those communities I think it would be fantastic to have an option to hold new users for moderation.
This plugin: https://wordpress.org/extend/plugins/bp-registration-options/ was able to do that but hasn’t been updated in ages…
And that option will probably stop bad users from getting in, forever

i am about to try this: https://wordpress.org/extend/plugins/stop-spammer-registrations-plugin/
– it looks very good. anyone tried it with BP yet?

@lairbear spam is an issue that is almost impossible to control, even the big proprietary social networks have a huge issue with spam – and they have alot of money to spend on controlling it. (I’m very popular with all of the really, really hot ladies on Facebook… lol)

In BuddyPress 1.6 their will be some anti-spam tools for the activity feed built-in that will hook into Akismet (http://akismet.com) to help control it, and while it has cut it down by alot on my test sites using it, nothing can beat manual HUMAN moderation. (Related ticket: https://buddypress.trac.wordpress.org/ticket/3660)

Theirs also afew plugins that add captchas to the registration page, to kick them out before their even in… oh, and this article is pretty comprehensive – http://wp.tutsplus.com/tutorials/security/best-practices-for-preventing-buddypress-spam-user-registrations/

You need to change the register slug. Pick something unique. Ex. http://www.mommychats.com/join-mommy-chats

This only blocks bots, people are getting paid pennies to sign up to sites so you can’t really block real people.

If you can, look at server logs to see a pattern for spam. Then block ip or emails. I would block yahoo emails, they are a spam haven. You could also limit to Facebook login only.

We could do with updated recommendations of antispam software, right enough.
Fortunately, deleting spammers is easy and take their posts down the tubes with them, but it is a chore.

@enderpal444 Their is functionality for this going into BP Labs when BuddyPress 1.6 is released.
See: http://byotos.com/2011/12/19/bp-labs-you-may-like-this/

While it isn’t exactly ‘core’ and is a completely separate, unofficial project, it is maintained by @djpaul who is a BP core dev and it is known for being a testing ground of afew of the new features being introduced in buddypress 1.6 (eg. akismet activity spam filter)

Might be an idea to keep an eye on it.

Every time I hear of this I have to say before anything else disable all plugins except for BP then try a test registration/activation. Even If it sends it to a spam folder in your email then you have used a process of elimination to find the culprit. Most of the time if you are getting your test activations in a spam folder on your email then setting up an email on your host from your domain cures the issue. Something like “admin_yourusername@yourdomain.com” in your cpanel webmail or whatever you have usually fixes this. You may also need to change the email in your dashboard/settings/general E-mail Address to reflect the email you created on your host depending on the host and how they handle mail. Hopefully this will help you. “My advise to anyone is after installing any plugin after BP is to do a test registration/activation each time.” That way you don’t have to sort through 20 plugins to find the one that breaks activation. Oh yeah, and if it activates go ahead and log-in with the username and password you created or the test registration/activation member you created will not show up in the members directory.

That is going to be the issue, pass the problem off to them to solve as it’s essentially a domain configuration problem, once they’re aware of the problem they will know how to correct. While you are working with them you might as well ensure they have set a SPF record for the domain and also PTA records both will help ensure mail servers can satisfy there spam checks and verify the domain and the server as being an authorised one to send mail for that domain.