Skip to:
Content
Pages
Categories
Search
Top
Bottom

Captcha Cannot Prevent Robot Registering On BuddyPress

  • @guoyunhebrave

    Participant

    WordPress 3.9.1
    BuddyPress 2.0.1

    URL: http://zjubot.org/

    At first, I use only Sweet Captcha plugin but It doesn’t protect my site well. Now I use WangGuard, Captcha, Sweet Captcha, SI Captcha… to prevent a robot registering on my site.

    BUT, it seems that the robot ignored all CAPTCHA methods and registered directly. I write the Captcha questions in several languages(English, Chinese). It is impossible to pass that certification for robots.

    When I disabled BuddyPress, robot registering was stopped.

    I have no idea to stop spam.

Viewing 10 replies - 1 through 10 (of 10 total)
  • @jconti

    Participant

    Hi @guoyunhebrave,

    I’m the WangGuard developer.

    Can you tell me your website please?

    Thank you

    @jconti

    Participant

    Ups, I’m sorry I see your website.

    I will update you here after look what’s happening.

    @jconti

    Participant

    The security question works, so bots cannot register in the website.

    How long are WangGuard active in your website?

    If are active less than 2 days, maybe are signups made before WangGuard was installed.

    All users has 48h for activate their accounts, so maybe bots are blocked. Wait 2 days and update the result here.

    @guoyunhebrave

    Participant

    Something I test with WangGuard:

    I set some WangGuard questions. Once these questions are answered, I could see wrong/right statistics in configuration page. But after robots registered, no information update.

    So maybe the robots can avoid register on the sign up page. That is beyond my knowledge.

    @guoyunhebrave

    Participant

    I installed this plugin today. I keep receiving robots registering until now.

    I think the robots have passed by WangGuard and any other CAPTCHA plugins, because all of them have no effect.

    Before I use BuddyPress on this site, I didn’t meet these problem. A simple CAPTCHA plugin works well. I will try to disable BuddyPress for hours, and see what will happen.

    @guoyunhebrave

    Participant

    After disabled BuddyPress, robots didn’t stop. I am almost sure the robot can skip the register page (both WordPress signup.php and BuddyPress register page).

    Maybe robots have a backdoor to register on WordPress. I don’t know how to further test.

    @guoyunhebrave

    Participant

    I finally solved it!

    This is caused by another plugin named “DW Question & Answer“. It has a quick register form that can be used to avoid CAPTCHA methods.

    I disabled this plugin and robots should be stopped.

    @jconti

    Participant

    Was that plugin adding a back door?

    @espellcaste

    Moderator

    Or was using its own form version and was with bad programming?

    @guoyunhebrave

    Participant

    @jconti @espellcaste

    It is not a real back door but a weak point. These register forms of plugins cannot be protected by CAPTCHA methods.

    I don’t know there is a sign up form in question page. I guess many site owners won’t know, because it is unnecessary to create another register entry: more entries, more danger.

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘Captcha Cannot Prevent Robot Registering On BuddyPress’ is closed to new replies.
Skip to toolbar