BuddyPress.org

Not sure of the process but even if you haven’t got bbpress running locate and remove the file. If spambots are managing to get around hidden fields that should remain empty it suggests they are not using whatever form that protection is on.

For CURL try adding this: (but check carefully things still work!)

# trap curl registration downloaders – block in allow,deny rules
SetEnvIfNoCase User-Agent “^curl” blog_spammer
Order Allow,Deny
Allow from All
Deny from env=blog_spammer

Be careful about blocking IP ranges it’s a difficult practice and one that technically you are supposed to notify about in case innocent yet important sites get blocked, you can add further rules to the deny lines above but unless there is a very persistent IP it’s probably not worth it and likely spoffed anyway.

@tedmann – have a search on your install for the bbPress folder and remove the register.php file. I guess it doesn’t have to be activated for the file still to be there and therefore usable by the spammers.

It worked like a treat for myself and @footybible

I’ve got the Humanity plugin running on our site, with a semi-difficult question. Likewise, I’ve done the htaccess trick, register slug, and so on. Haven’t blocked CURL requests (how do you do that?).

I never configured bbpress for our site. Even if I haven’t done that, is it possible that register.php file is still lurking somewhere on the site? Are there any more drastic measures I can take? We’re getting killed every morning — not just with spam signups, but spam blog posts. Would blocking the offending IPs (quite a few) be a viable solution?

@boonebgorges is @kebdarge meaning there isn’t one for this site?

That’s exactly what bp-moderation does.

You’re quite correct it does still exist which I find very odd as I seem to have a recollection of comments that said it would be / was removed.

I have the latest version of buddypress and I had to delete the register.php from bbpress, as is suggested above. This reduced my spam signups from around ten a day to none.

I had lot of problems to stop spamblogs from signing up than I have installed Buddypress Humanity plugin and its been a month and i have not got a single spamblog signup as this plugin lets you set your own question and answer.

Thought the stray registration file had been dealt with.

As well as rename the register slug, rename the footer links as they are searched out in their default form. I also added a rule to htaccess that checked the referer page and if it wasn’t the site chucked the request to somewhere else (do need to make that somewhere interesting) also blocked any CURL requests for the register page, finally made the decision that blogs could not be created during sign up, once registered members could create blogs and this made a difference.

@tedmann – there was a register file kicking around in the bbPress forum files, and I think that was the back door into the BuddyPress system. I don’t know if that issue has been addressed in the latest BuddyPress / bbPress releases.

We stopped spam registrations almost completely on Hello Eco Living by removing the register file in the bbPress installation, and changing the url of the BuddyPress registration page.

Here’s what I don’t understand: All our recent Spam registrations are completely bypassing the BP registration form. I’ve got a tricky Humanity plugin question on there, as well as several required fields. But when I look at the accounts the spammers are creating, they have none of those fields filled out.

Is there some kind of backdoor registration option in BP or WPMU? How are they getting in?!

I’m for anything speeding up the process… BuddyPress is on the verge of taking off and “taking over”. I check the trac daily to see where we are in the process and help as much as I can… mainly because I NEED to get some of these seemingly basic fixes accomplished. The guys you’ve mentioned above are very SHARP, but there are time/money & commitments/constraints involved…

I firmly believe that once the 1.2.6 patch is released the BuddyPress platform will have shaken off it “childhood” stage and be primed to be THE major contender in the field of Social Media Platforms. Once “we”/”They” knock out 1.2.6 (and fix the issues with searching the BuddyPress Site and Site Spammers) the sky is the limit and people are going to begin to look at the fledgling “ugly duckling” of WordPress as the SWAN that it is.

BuddyPress is on the tarmac waiting to fly… it won’t be long now…

? There is still the same ability to mark as spam either from Super Admin -> Users or Super Admin -> Sites. Under Users you will have to use bulk actions dropdown as the buttons appear to have been removed allowing to mark as spammer.

You may need to clarify the issues you are having with the admin panel.

Did you pass parameters into the messages_new_message() function?

All the parameters can be found in the /plugins/buddypress/bp-messages.php file like Boone stated.

—

Private messages are disabled on this website at the moment due to spam. However, on a regular install, simply navigate to the “My Account” menu in the BuddyPress admin bar (located at the top) and navigate to “Messages”.

@adam320
It’s great you have written a plugin to help combat this vile practise of spamming, and the community thanks you for that.

However dragging up four old posts and posting to each the same reference to your plugin would generally be considred to be… Can you fill the blanks in?

You have the group created, shout about the plugin there. Resurrecting old posts is somewhat annoying for the listings.

Try out my plugin, to help combat spam blogs:

https://wordpress.org/extend/plugins/buddypress-humanity

Try out my plugin, to help combat spam blogs:

https://wordpress.org/extend/plugins/buddypress-humanity

Try out my plugin, to help combat spam blogs:

https://wordpress.org/extend/plugins/buddypress-humanity

Try out my plugin, to help combat spam blogs:

https://wordpress.org/extend/plugins/buddypress-humanity

It’s spam Paul.