We have our blogs set so you have to be registered and logged in to comment. Yet we still get spam. How do they manage to get it through?
We have our blogs set so you have to be registered and logged in to comment. Yet we still get spam. How do they manage to get it through?
It will most likely be trackback or pingback spam. There is an option for it under your settings = > Discussion to turn it off and/or maybe think about Akismet or MontySpam to help out. There are also a few plugins over at wpmudev.org for trackback spam.
Trent
It's definitely regular comments, not trackbacks.
I've watched the blogs that complain (including my own) for a while, and trackbacks and pingbacks have been disabled all a long. Comments have always been set to require registration.
Unfortunately, we can't use Akismet due to the large number of blogs on our site, and we don't earn enough money from them to cover the commercial usage fee. I'm not familiar with montyspam, but will check it out thanks.
Still, it seems like there is some kind of problem going on. Last year, people were able to sign up for blogs using a remote script, even when registrations were disabled. I'm assuming the same thing is going on with the comments.
A very large number of the spam is linking to http://forum.scriptsby.com/?mforum (followed by =keyword) Does this look familiar to anyone.
Once again, this is coming from unregistered spammers despite settings closed to non-registered users.
Surely it's a bug?
Ok, it's trackback spam (all porn). Trackbacks are disabled, so I don't know how they are getting thru.
The comment agent on every one is Jakarta Commons-HttpClient/3.1. I don't know if that is normal or not.
I've deleted wp-trackbacks.php as a last resort.
Hopefully if anyone else is experiencing this, they will know they are not alone :)
What version of WPMU are you running?
"The comment agent on every one is Jakarta Commons-HttpClient/3.1. "
Can't you ban those requests on the server level?
Are you sure trackbacks are disabled on *all* affected blogs? Are the trackbacks turned off on affected entries?