@resom That’s right.
Have those who have not “received” activation emails checked their spam folders? Unfortunately, that happens even without BP activated.
It happens with certain webhosts. Determine whether it’s your installation which is not sending the email or whether your users are not receiving the email for some reason or another (possibly in spam folder?)
Check out “BuddyPress isn’t sending out emails” section in this page https://codex.buddypress.org/user/faq/
Will an SSL for the login and reg page help ?
I think you are correct, there’s 530 users now.
Some of them have bot in the email name and many are from the same domain.
What’s interesting is that the default forum role is being assigned to these users but not others and these users have their name field filled out whereas others don’t.
What is the point of signing up for an account but then not confirming it to then spam the forum?
BP Registration Options.
I think those users are spam. What usernames do they have?
`I have group creation disabled and users have to fill in a form to have us manually create their group.`
The spammer might have hacked into the Site/Super Admin account. Backup database. Curious what’s the username used by the hacker? Check activity of said “member” and remove/delete anything created by said member then delete from users. Do you still have a username “admin”? Then create another username for your admin account and then demote the “admin” to suscriber in wp-admin or remove completely.
https://codex.wordpress.org/FAQ_My_site_was_hacked
Hi guys – I’m running the latest WordPress and Latest Buddypress with BBpress sitewide.
Yesterday I had 20-30 new users signup to my site, they show up in the site activity but not one shows up in the Members Directory. Now I know this is because they need to click the activation code link in their confirmation email and login to become a member.
I’ve tested the process by signing up myself and the email came to my inbox, so it didn’t go to Spam for me, I’m hoping this isn’t the problem for them either.
Therefore I am stuck as how to proceed in order to encourage members to actually confirm and go on to use the site. It seems like somewhere between wanting to sign up and going through the process of joining I’m losing everyone.
Has anyone else experienced this issue and if so how did you combat it?
Thank you!
On my site, I have group creation disabled and users have to fill in a form to have us manually create their group.
Today, a spammer/hacker bypassed this, created an account then created a group and filled it with spam.
How can I prevent php files from being directly accessed if this is how that person did this?
Hey try use this plugin Stop Spammer Registrations Plugin, is good and is aggressive. It can check for too fast registration (bot filled up those field fast), HTTP_REFERER, disposable email address and much more…
Most of them hunt for your register page slug /register/, try to noindex this page or change the slug.
Can I get the best ideas to help stop spam users making accounts?
I have been wondering whether creating an SSL for the login and registration pages would make a difference, would it?
Have a personalized theme —– http://comcentre.moretonbay.biz/
Have installed s2member pro, after much endeavour cannot create groups and now unable to register new members, also since I deactivated the anti spam login am getting dozens of new member requests. What a mess!!!!!!!!!!!!!!
Firstly how do I create groups?
here’s another plugin made by @imath which can help to wipe oup defect/unwanted/sleeping users.
https://github.com/imath/bp-wake-up-sleepers
Still in Beta but works good on 3.5.1/1.6.4
@chouf1 this is very useful, although I cannot find the bulk options on the plugin…
@slaffik stop spammer plugin looks very aggressive – just what I need. Also, very little to do in terms of maintaining user database – I like!
@jconti thanks, I think the unconfirmed plugin will take me places I want to go, but I will continue to use wangguard and see if it catches anything that gets past stop spammer!
Hi @orbitor
How you said, WangGuard works great for protect your website and with the Wizard you can check many of the old ones. But every website is different and WangGuard knows many old Sploggers, but not all of them. WangGuard is only 1 year an 11 month old (today).
The first year blocked 750.000 sploggers, and in the in the next 11 months, 5.000.0000 sploggers. You can see that its growth is exponential.
About your question if there is a tool for check the humanity of your old users… I’m sorry but only WangGuard. WangGuard is the only tool out there to check users
Kind regards
@chouf1 Where the heck did this come from ! Awesome 🙂 Cheers
I use this: https://wordpress.org/extend/plugins/stop-spammer-registrations-plugin/
And this: https://wordpress.org/extend/plugins/bp-registration-options/
The first one catches spam. The second – those that the 1st one overlooked.
From that time – no spam at all.
What I use is buddypress captcha for registration, works like a charm!
I have just taken over maintaining a neglected wp with bp site theculinarytrust.org . I have updated to wordpress 3.5.1 and buddypress 1.6.4 and all is working well. The problem is with the site’s subscribers. There are over 35,000 subscribers, most of which are sploggers. I’ve been using WangGuard for the last week or so, and it does a great job spotting new splog signups. The problem is all the old subscribers. I’ve tried the WangGuard wizard, but it does not get anywhere near the number of sploggers I need removed.
Is there some plugin that could help me filter out human subscribers? Is there some way to send an email to all subscribers to verify their humanity!?
Hope you can help with any ideas or solutions.
Thanks!
Andrei
Hey @mercime,
They definitely get the activation email. I have it setup with an SMTP email service (mandrill) and have tested it to make sure it avoids spam filters. So it gets sent, and it lands in the inbox – and they are activating their email – but then they don’t login again or they request a password change or something. It’s not all users, but enough to try and make a fix.
I think it’s like this…
They sign up for an account – do some other stuff – come back and see an activation email so they click on it… but now they have forgotten then details they used when signing up. Or they sign up – log in – but then come back a day or two later and have forgotten their details.
If a welcome email was sent with their user details (like most sites do) they would have it stored somewhere they can access it again and again whenever they forget.
Do you know how I can set this up? plugin or otherwise?
I think the problem is that they never get a sent an email with their account details (username and password) when they join.
You mean they don’t receive an activation email? They should already know what their username and password is because that’s required when you register.
Have you checked whether it’s your site that’s not sending the activation email or whether it’s their email service provider (gmail,yahoo,hotmail,aol,etc) that’s blocking your email and/or sending it to user’s spam folder?
hi @mindyjoy,
@boonebgorges did a nice plugin a few time back who exactly does what you ask for.
Unconfirmed ! https://wordpress.org/extend/plugins/unconfirmed/
i use it to remove automatic spammers from my db but you can also resend activation e-mails or do it mnually (need a trusted relation to e-mail address and.or username i guess).
Does anyone have a solution for this? I am facing the same problem. Some new users are not receiving the activation email. It is not going to their spam folders. I estimate about every 5th user does not get the email. I can tell who doesn’t receive the email because their Forum Role is blank. Is there a way to generate and re-send the activation email, or manually activate these users? Thank you.
Here’s an alternative that makes the polling more social
It’s one I’ve developed after someone requested it on top of my Facebook polling plugin
http://epicplugins.com/epicplugingallery/wordpress-social-polling-plugin/
[ Please do not put more than one link to your paid plugin, otherwise all will be deleted as spam ~~~ Mercime ]
