BuddyPress.org

I have been running BP in Production since well before the 1st alpha release on the same url with the exact same registration slug AND requirements. Nothing is protecting on my site any more than a standard install – no captcha, etc. I can count on my hand the number of spam attempts to register. They are so few, I just delete them and use BanHammer once they try.

How? We have a specific (albeit small) set of required registration fields to fillout. That’s all. I love siple and fast registration as much as the next guy but, unless you want to enforce email address verification and a bunch more, those are your real options.

Changing the slug will work until it doesn’t …which won’t be very long. Consider how that spammer found you in the first place…with a bot – not by randomly coming across your site.. and just like in the matrix, the bots will find you again.

If you change the signup slug, ie. from to signup to regme, probably that this can be found easely by spammers. But if you change signup to bolimp or domybest or f_12gt_99xpm, probably not. And building a random letter word constructor to spam a wp install is probably too much also… As far as i know, the majority of wp users never look into the code. And robots like majority…

Anyway, the signup table would still exist… and accessing a db is not impossible at all i presume. So the only thing to change is the table name, 6 x by day if necessary. And this is not simple at all.

Happy coding !

Have you read these recommandations ?

http://www.bp-tricks.com/tips_and_tricks/stopping-the-sploggers/

They help in many cases. Really.

Spam is becoming a serious threat to Buddypress. We need to create a dedicated Spam section to help people fight it.

Ever since I posted my site here in the showcase thread I suddenly had a flood of spam

@bowe

Why would YOU put advertising on your site when spammers do it for you for free ?

Top be rich one day, one hour or a few minutes, never forget that time is money

> So don’t link it.

That would work.

My point was that whatever method you use needs to still provide the same level of protection from spammers or else you might as well leave the “powered by…” intact.

I’d say the noteworthy features for Anti-Splog are their API and limiting number of signups per IP per 24 hours.

I don’t really like the “changing signup page location every 24 hours” feature, although I understand the rationale, I’d prefer a permanent location for indexing reasons.

The rest of it is doable.

To make it seem like their plugin is uber-spectacular, they’ve created a flowchart :p

http://wpmu.org/wp-content/uploads/2010/01/Anti-Splog.gif

My experiences with the premium plugins/themes in the past hasn’t been good to be honest. I can understand them wanting to be reimbursed for their work though.

Plugin looks great and their blog is also great (WPMU.org).. I’m not so sure about their premium thingie though.. The plugin does look very good, so I’ll keep an eye on it

The WPMUDEV folks purport to be big players on the bP community but they have zero presence on these boards helping people out and they have plugins designed to suck you into their overpriced premium model. I treat everything on that site with a cautious eye. But that’s just me

There is no problem with people recommending certain plugins, either paid-for or “free.” If this was Gpo1’s own plugin, then that would count as advertising. But as it isn’t… good find! Will have to take a look sometime.

Arturo, there are other ways to stop sploggers. Check this out

http://www.bp-tricks.com/tips_and_tricks/stopping-the-sploggers/

but is a premium plugin… not free like akismet… argh!

Contact a forum moderator On that one.

Read this article on bp-tricks.com:

http://www.bp-tricks.com/tips_and_tricks/stopping-the-sploggers/

There’s a ton of methods listed there to stop spam.

I am not following what you are saying at all..

I always go into wp-admin and click on users and then go through there to mark as spammers – I guess there is another way to do this with buddypress?

I would like a way to mark as spammers from the front page. I would also like a way to add email domains to the spam list at the same time, so the same email domain the spammer used to sign up with can’t be used again.. perhaps also pull the ip addy that they used and add that to a list that could be inserted into an htaccess deny list…

A better way to find them by username or screen name would be nice. When spammers hit my BP site, it shows up as blog spam in the recent wire or whatever it’s called, listed as posted by “danielle jones” – but when I go into wp-admin backend / users and search for danielle, it comes up with nothing – that sucks – so I have to go back to my site’ home page, and hover over the spammers name to see what the url is, and then search for the member signup name that way – bleh

@alexmaxim unless they completely missed your question, I guess the answer is no.

I’d also like to know if it’s possible to customize the default settings for e-mail notifications. Not because of server issues, I just don’t want to spam my users by default. (using 1.2 beta)