Yes, hnla, an active session.
https://trac.buddypress.org/ticket/2575 looks like the same issue.
BP 1.2.5.2
Presume this is while they still have an active session on the go?
It ought to block spammers properly. What version of BP are you testing this on?
Go to the domain.com/member/account and use the pull down from the admin bar to mark the account as “not a spammer”
A person intentionally registered, and started to put “spamspamspam” all over the place – forums, comments, activity stream, etc.
The account was marked as spammer from the pull down yet they were still able to post. Finally went into the Edit User in /wp-admin and changed the account from subscriber to blocked.
Is this normal behavior or is there something else that should be done to block someone?
@jordashtalon
In your WP dashboard, go to “Users” and check the box next to the name of the user highlighted in red. Then, select “Not Spam” from the “Bulk Actions” dropdown (top or bottom of your user list). Click “Apply”. Should do it.
I go to a user profiles page and it says “User marked as spammer and only viewable to admins” or something like that, the user isn’t a spammer, how do I unmark them as a spammer?
Thanks.
Is there anyway to manually activate a users account? How can you manually “Un Spam” a user?
nope, not in spam folder. when I try to input the link while logged in as admin, it simply redirects to the homepage. the bp site is http://www.thecrookedpolitician.com
test user is not showing up at all and is not marked as spam.
@hnla My first reaction was to mark them as spam then delete from BP admin bar. Marked as spam successfully but not deleting didn’t work 2 cases. Maybe a straight delete works, I will try that next.
They were successfuly deleted though from the WP back-end under “Users” and logged out. Their forum posts are not inherited.
Are you sure that the email was not placed in a spam folder?
Login as admin and go to domain.name/members/userid
There should be a marking stating the person is marked as a spammer. This comes from not activating the account from the email. It can be easily changed by pulling down from the admin bar.
@afritech I meant ‘delete’ a user rather than mark them as spammer does that not instantly halt them?
@djpaul Actually delete from adminbar – Admin-Options works fine on 1.2..5.2 so it must have been an earlier version that had issues or it manifests under certain conditions which aren’t occurring at present -if that’s so and I catch it I’ll add a ticket.
edit/ On 2.9.2 /1.2.5 it threw an error but haven’t really time to establish whether that is due to the modified install or 1.2.5 rather than 1.2.5.2 or some plugin interaction.
Marking a user as a spammer, only disables their next login – according to what I have found out. WP 2.9.2 BP 1.2.5.2 They can still post on forums and send PMS & Friend requests in the current session.
Is there a way to end their session? Forcibly log them off?
I just had another check, from another profile and
user with ‘normal’ rights
and the same problem happens,
message is sent to 2 people, One random, and one who I have deleted as admin for spamming via wordpress admin panel 
sorry, it is WPMU 2.9.1 and Buddypress 1.2.3 (I think)
there are many plugins installed and some small modifications, but not related to PM
what I think may have triggered it, is i had to delete some spammers, and deleting via buddypress did not seem to work, so I went to wp-admin and deleted one or two spammers there,
but it asked me to transfer their posts to my (admin) profile,
there were no posts, but that dialog box came up, so I accepted it.
and it had completed the delete process successfully,
Assuming those aren’t spammer user accounts, they need to log in to your site at least once after BuddyPress has been installed to show up.
I’ve got one blog located …. /blog/ folder – and it’s been there for 5-1/4 years and MySQL database huge and tons of post.
I wanted to start a buddypress in the …/ root folder and I did just that about 3 weeks ago. Now I have about 28 users, excluding spam accounts created, and I’ve set it up, have a nice template, added about 55 plugins and still whittling them down, added content, etc ..Have about 60 groups and forum topics created but, mostly in anticipation really .. ‘created’ but not used yet.
There is continual conflict with the caching between both the …/ root and …/blog/ .htaccess and permalinks and everyday one site’s permalinks (usually .,../blog/ rewrites itself the rule back to ../ root) .. and my CPU resources have increased from about 50% to 85% in the past 3 weeks
Ideally – if I were starting from scratch – I think I would want a community on the …/ root and a …/blog/ for the main blog or even have the blog also in the ../root. WP3.0.1 is a multisite and i could have one installation for both situations. But, how can I do this without rearranging all the permalinks, and outsite links and inward links and other considerations I haven’t even thought of yet? The MySQL database (or at least the backup) ranges between 20-40MB in size without buddypress … I can see that community growing in size over time.
SO – can someone please talk me out of trying to change this?
Or – can someone talk me into this and help me figure out how to get import everything from the root buddypress into the ../blog/ site and then change that from the blog to the root ??
Thanks
HART
PS existing sites in question:
http://PetLvr.com/blog/
http://PetLvr.com/
@catchit If I remember correctly Akismet is only for blog comments… not blog posts, forum posts, or updates. To prevent that you’ll need to prevent spam users from signing up for your site in the first place. I would recommend using the BuddyPress Humanity plugin.
@TedMann
I think someone more knowledgeable about things .htaccess could better answer that question. I’m really still learning about all this stuff myself.
About your other idea though… now that could be brilliantly simple! It could sure put one heck of a damper on the efforts of human sploggers who are, if their activities are any indicator, a lazy bunch. Only thing is, it wouldn’t do much for those bots who manage to squeeze through whatever “backdoor” they happen to find (or make).
Anyone want to take on a little “Avatar Required” plugin challenge here?
@pcwriter It’s weird. I tried a proxy server, and was still able to get to the signup page by typing in the url, which leads me to believe the htaccess change isn’t taking right. Is there anything that could be interfering?
I had another anti-spam idea: Would there be a way to require a user to have an avatar? What I’ve noticed is that all the spam signups have no avatars. Wondering if making that essentially the same as required profile fields would help.
@TedMann
If you’re using the same machine that you normally use to access that page, it’s highly unlikely that you get redirected, ‘cuz as site admin, your IP has already been “goldlisted” and you’re known as one of the good guys.
To really test if it’s working properly, and there’s no reason it shouldn’t be, try accessing the url directly from an airport or internet café with wifi. Or, better yet, through a proxy server.
You could also have some fun and try this:
Set up 2 email accounts at any test site you’ve got going (the weirder the names, the better). From a different IP (another computer), email your wp-signup link from one account to the other, and click on it. If you’ve never sent emails to your buddypresssite from the test site (thus, sender unknown), that access attempt would probably be flagged and you’d probably get bumped. Just my thoughts…
@Roger Coathup
I find some groups which are full of spam contents.
@Paul Gibbs
Ah, that accounts for it!
So, I have a question re: the htaccess tweak to block spam registrations. If I type http://mybuddypressite.com/wp-signup into my browser, I should get automatically redirected to my GOAWAY page, right? If that’s not happening, am I doing something wrong?
