Skip to:
Content
Pages
Categories
Search
Top
Bottom

Captcha Cannot Prevent Robot Registering On BuddyPress


  • guoyunhebrave
    Participant

    @guoyunhebrave

    10 years, 6 months ago

    WordPress 3.9.1
    BuddyPress 2.0.1

    URL: http://zjubot.org/

    At first, I use only Sweet Captcha plugin but It doesn’t protect my site well. Now I use WangGuard, Captcha, Sweet Captcha, SI Captcha… to prevent a robot registering on my site.

    BUT, it seems that the robot ignored all CAPTCHA methods and registered directly. I write the Captcha questions in several languages(English, Chinese). It is impossible to pass that certification for robots.

    When I disabled BuddyPress, robot registering was stopped.

    I have no idea to stop spam.

Viewing 10 replies - 1 through 10 (of 10 total)

  • Jose Conti
    Participant

    @jconti

    10 years, 6 months ago

    Hi @guoyunhebrave,

    I’m the WangGuard developer.

    Can you tell me your website please?

    Thank you


    Jose Conti
    Participant

    @jconti

    10 years, 6 months ago

    Ups, I’m sorry I see your website.

    I will update you here after look what’s happening.


    Jose Conti
    Participant

    @jconti

    10 years, 6 months ago

    The security question works, so bots cannot register in the website.

    How long are WangGuard active in your website?

    If are active less than 2 days, maybe are signups made before WangGuard was installed.

    All users has 48h for activate their accounts, so maybe bots are blocked. Wait 2 days and update the result here.


    guoyunhebrave
    Participant

    @guoyunhebrave

    10 years, 6 months ago

    Something I test with WangGuard:

    I set some WangGuard questions. Once these questions are answered, I could see wrong/right statistics in configuration page. But after robots registered, no information update.

    So maybe the robots can avoid register on the sign up page. That is beyond my knowledge.


    guoyunhebrave
    Participant

    @guoyunhebrave

    10 years, 6 months ago

    I installed this plugin today. I keep receiving robots registering until now.

    I think the robots have passed by WangGuard and any other CAPTCHA plugins, because all of them have no effect.

    Before I use BuddyPress on this site, I didn’t meet these problem. A simple CAPTCHA plugin works well. I will try to disable BuddyPress for hours, and see what will happen.


    guoyunhebrave
    Participant

    @guoyunhebrave

    10 years, 6 months ago

    After disabled BuddyPress, robots didn’t stop. I am almost sure the robot can skip the register page (both WordPress signup.php and BuddyPress register page).

    Maybe robots have a backdoor to register on WordPress. I don’t know how to further test.


    guoyunhebrave
    Participant

    @guoyunhebrave

    10 years, 6 months ago

    I finally solved it!

    This is caused by another plugin named “DW Question & Answer“. It has a quick register form that can be used to avoid CAPTCHA methods.

    I disabled this plugin and robots should be stopped.


    Jose Conti
    Participant

    @jconti

    10 years, 6 months ago

    Was that plugin adding a back door?


    Renato Alves
    Moderator

    @espellcaste

    10 years, 6 months ago

    Or was using its own form version and was with bad programming?


    guoyunhebrave
    Participant

    @guoyunhebrave

    10 years, 6 months ago

    @jconti @espellcaste

    It is not a real back door but a weak point. These register forms of plugins cannot be protected by CAPTCHA methods.

    I don’t know there is a sign up form in question page. I guess many site owners won’t know, because it is unnecessary to create another register entry: more entries, more danger.

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘Captcha Cannot Prevent Robot Registering On BuddyPress’ is closed to new replies.

Topic Info

Topic Tags

Skip to toolbar