How to protect wordpress blog from Comment Spammings

Discussion in 'WordPress' started by westhaven, Dec 31, 2006.

  1. #1
    I am using wordpress version 2.0.3
    Pls suggest me which pluggin i should use to avoid spamming comments. I am getting daily aroud 500 comments on my particular blog and deleting those comments is so boring.

    Any help regarding this is highly appreciated :)
     
    westhaven, Dec 31, 2006 IP
  2. JEET

    JEET Notable Member

    Messages:
    3,832
    Likes Received:
    502
    Best Answers:
    19
    Trophy Points:
    265
    #2
    A post I recently found. ;)

    Also simply renaming your "comment processing page" will block almost all of them, as it's all automated with a "third party software" generally...
    Bye :)
     
    JEET, Dec 31, 2006 IP
  3. Richie_Ni

    Richie_Ni Illustrious Member

    Messages:
    10,721
    Likes Received:
    1,175
    Best Answers:
    0
    Trophy Points:
    410
    #3
    Richie_Ni, Dec 31, 2006 IP
  4. westhaven

    westhaven Well-Known Member

    Messages:
    3,936
    Likes Received:
    452
    Best Answers:
    0
    Trophy Points:
    195
    #4
    yup this plugging is there but when i activate it ask me for some ttf file which is not on my server. :confused:
     
    westhaven, Dec 31, 2006 IP
  5. amitpatel_3001

    amitpatel_3001 Results Follow Patience

    Messages:
    14,074
    Likes Received:
    1,178
    Best Answers:
    0
    Trophy Points:
    430
    #5
    I think you are referring to API key which you can get from wordpress.org when you reg there.
    Or else try the fully automated Spamkarma2 ;)
    Amit
     
    amitpatel_3001, Dec 31, 2006 IP
  6. Richie_Ni

    Richie_Ni Illustrious Member

    Messages:
    10,721
    Likes Received:
    1,175
    Best Answers:
    0
    Trophy Points:
    410
    #6
    ttf file?
    Could you upload a screenshot?

    Edit:
    I think it's wordpress.com but not wordpress.org,eh? :)
     
    Richie_Ni, Dec 31, 2006 IP
  7. JEET

    JEET Notable Member

    Messages:
    3,832
    Likes Received:
    502
    Best Answers:
    19
    Trophy Points:
    265
    #7
    .TTF are font files.
    If this plugin uses some sort of image verification, or something similar, then it probably is looking for fonts to use in image creation...
    Haven't used this plugin so can't tell which specific file/font you would require.
    Bye :)
     
    JEET, Dec 31, 2006 IP
  8. westhaven

    westhaven Well-Known Member

    Messages:
    3,936
    Likes Received:
    452
    Best Answers:
    0
    Trophy Points:
    195
    #8
    Jeet You are right it asked me .TTF font file and it tried located on my server but couldn't find that.
     
    westhaven, Dec 31, 2006 IP
  9. eches

    eches Well-Known Member

    Messages:
    250
    Likes Received:
    6
    Best Answers:
    0
    Trophy Points:
    110
    #9
    I am using Spam Karma 2, it works perfectly, never caught positive comments and none of spams get through.
     
    eches, Dec 31, 2006 IP
  10. Affers

    Affers Peon

    Messages:
    183
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    0
    #10
    I echo the sentiments of Eches83. SK2 is fantastic. It sends you a daily digest of everything it's caught so that you can simply and easily restore anything that it's accidentally chewed up. Very handy.
     
    Affers, Jan 2, 2007 IP
  11. richrf

    richrf Active Member

    Messages:
    1,101
    Likes Received:
    26
    Best Answers:
    0
    Trophy Points:
    88
    #11
    Hi,

    Depending upon the visibilty of your blog, only one anti-spam may be enough or you may need more. There is no one way to do it.

    The Bad Behavior plugin is great at filtering out most of the spam attacks. I get about 150 a day. Next up comes Akismet, which gets all of the known spammers that get through BB. Finally, there is Spam Karma, which does an excellent job of catching potentially new spammers.

    The problem with this approach, is that Bad Behavior, in particular, may block legitimate viewers, so it is a decision you have to make. There are lots of discussion on this in wordpress.org, if you need some opinions.

    Rich
     
    richrf, Jan 2, 2007 IP
  12. westhaven

    westhaven Well-Known Member

    Messages:
    3,936
    Likes Received:
    452
    Best Answers:
    0
    Trophy Points:
    195
    #12
    Amit Spamkarma2 is crap it deleted my genuine comments and sent spammy ones for moderation :( . Infact you also stop using it. when i get a comment then i also recieve an email of that comment. I checked those comments in my mail box and were genuine but Spamkarma2 deleted them :(
    I think i would need Image verification when someone comment. Becoz in my blog i get lot of genuine comments too.
     
    westhaven, Jan 2, 2007 IP
  13. amitpatel_3001

    amitpatel_3001 Results Follow Patience

    Messages:
    14,074
    Likes Received:
    1,178
    Best Answers:
    0
    Trophy Points:
    430
    #13
    well to be frank its working perfectly for me :)
     
    amitpatel_3001, Jan 3, 2007 IP
  14. Andiz

    Andiz Peon

    Messages:
    45
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #14
    5) Deny Access to No Referrer Requests

    When humans comment on your blog they have read the post and leave a comment. This of course leaves the referal from your blog. One easy way to block spammers is to check for the referal. Simply paste the lines below into your .htaccess file in the root of your webserver.

    RewriteEngine On
    RewriteCond %{REQUEST_METHOD} POST
    RewriteCond %{REQUEST_URI} .wp-comments-post\.php*
    RewriteCond %{HTTP_REFERER} !.*shoemoney.com.* [OR]
    RewriteCond %{HTTP_USER_AGENT} ^$
    RewriteRule (.*) ^http://whereyouwanttosendthem.com/$ [R=301,L]

    What you need to edit:

    RewriteCond %{REQUEST_URI} .wp-comments-post\.php* - If you are not running a wordpress blog then you will want to change that to the file that gets the post for comments.

    RewriteCond %{HTTP_REFERER} !.*shoemoney.com.* [OR] - obviously you want this to be your domain.

    RewriteRule (.*) ^http://whereyouwanttosendthem.com/$ [R=301,L] - this is where you are redirecting them too. This probably does not matter since the automated spambots will not follow redirects.

    Done!

    4) Kill tor anonymous proxies

    Thats cool people want to surf anonymously and all that but being that about 75% of my comments come from tor proxies its much easier just to block them.

    simply go here and copy this to your .htaccess to block all the tor servers

    3) Stop Comments On Older Posts

    Spammers target older posts for 2 reasons.

    A) they show up in search engines and thus they know:

    * search engines value the page pr wise
    * it could be relavent to the keyword they are trying to spam

    B) You wont see it. - since the post is old its unlikely that you would ever notice thus greater chance of sneaking it by you.

    You have a few options to fix this-

    You can manually disallow comments for posts after x amount of days (ick)

    If you have wordpress you can download this plugin
    which will automatically close off comments and trackbacks after 21 days.

    If you have some h4×0r skills you can setup a cron job (thats a automated task to us ninjas) that will edit your database directly checking for past posts and setting the comments and

    2) Blacklist Repeat Offenders:

    When some spammers do get in you can blacklist there ips so they wont ever be able to again… this process does suck a bit but its a option.

    Again edit your .htaccess file:
    order allow,deny
    deny from 192.168.1.1
    deny from 192.168.1.*
    allow from all
    Remember * represent wildcards

    1) Rename your comment file

    The default for wordpress is wp-comments-post.php by simply renaming this file to say… wpc.php then changing your theme to reflect the different location for the comment file you will ward off a TON of spammers. This will kill 100% of the automated spam bots.

    And I'd like to suggest Akismet and Spamkarma 2 upon these 5 tips.
     
    Andiz, Jan 3, 2007 IP
  15. richrf

    richrf Active Member

    Messages:
    1,101
    Likes Received:
    26
    Best Answers:
    0
    Trophy Points:
    88
    #15
    This is perfectly feasible, since Spam Karma is looking for some key words, phrases, characteristics, which for many blogs would be considered bad but for other blogs are what would be expected. SK assigns "scores", which can be weakened in the options panel, if the administrator would like to be more lax. For example, many of the posts on WickedFire would probably be tagged as spam but perfectly acceptable on WickedFire. A lot of this is a matter of taste and expectations. But, SK, shouldn't have deleted them. It should have just tagged it for moderation.

    In anycase, there is an additional plugin available to coordinate SK with Akismet, if anyone decided to use both.

    Rich
     
    richrf, Jan 3, 2007 IP
  16. SFOD_D223

    SFOD_D223 Peon

    Messages:
    4,512
    Likes Received:
    174
    Best Answers:
    0
    Trophy Points:
    0
    #16
    Just a question, but have you enabled the "akismet" plug-in to snatch any spam coming towards your blog.
     
    SFOD_D223, Jan 3, 2007 IP
  17. dcristo

    dcristo Illustrious Member

    Messages:
    19,776
    Likes Received:
    1,200
    Best Answers:
    7
    Trophy Points:
    470
    Articles:
    7
    #17
    Just activated it today, will let you know how it goes.
     
    dcristo, Feb 18, 2007 IP
  18. ichigo

    ichigo Well-Known Member

    Messages:
    2,913
    Likes Received:
    116
    Best Answers:
    0
    Trophy Points:
    135
    #18
    ichigo, Feb 18, 2007 IP
  19. ramakrishna5uin

    ramakrishna5uin Peon

    Messages:
    352
    Likes Received:
    58
    Best Answers:
    0
    Trophy Points:
    0
    #19
    I am using Spamkarma its working fine for me
     
    ramakrishna5uin, Feb 18, 2007 IP
  20. Antonio

    Antonio Well-Known Member

    Messages:
    1,504
    Likes Received:
    128
    Best Answers:
    0
    Trophy Points:
    155
    #20
    Karma2 would do some help, most spam bots will be eaten, Akismet 2.0 would stop most pingback spam.

    AuthImage would stop all spam bots. I have not got any spam after installing it.
     
    Antonio, Feb 19, 2007 IP