Connected Internet - Latest Comments in Added Two New Plugins To Increase WordPress Spam Protection

Re: Added Two New Plugins To Increase WordPress Spam Protection

Richard Cummings — Sun, 24 May 2009 11:18:49 -0000

Yes, it looks as though the spammers have gotten to this article. Several comments above are clearly spam, but thanks for these updates on how to prevent spam. I'll have a look at each!

Re: Added Two New Plugins To Increase WordPress Spam Protection

Michel — Sat, 23 May 2009 07:12:51 -0000

That's funny... Looks like there is no more Math AntiSpam protection here, in this blog, and it also appears that the latest comments are (before this one)... pure spam! :)

Re: Added Two New Plugins To Increase WordPress Spam Protection

Cheryline — Tue, 12 Aug 2008 12:08:51 -0000

spammers are very adapt to the new technologies and always try to find a way to hack your system and get their message across. You always have to stay above them at all times.

Re: Added Two New Plugins To Increase WordPress Spam Protection

Quix0r — Sat, 17 Feb 2007 10:48:53 -0000

Oh, and sorry for my bad english. :/

Re: Added Two New Plugins To Increase WordPress Spam Protection

Quix0r — Sat, 17 Feb 2007 10:47:40 -0000

On my blog I have now answered someone what to do next after you have created your key WP_SECRET in your wp-config.php script. Please have a look on it.

Re: Added Two New Plugins To Increase WordPress Spam Protection

Everton Blair — Thu, 14 Dec 2006 06:01:33 -0000

Thanks Quix0r. I think I'll give this a go this evening, as although the amount of spam getting through to Akismet has fallen by around 95%, which means I can now catch the false positives, I want to stop the 5 spam comments per hour that are still somehow getting through.

Still it's better than the approx. 100 per hour I was getting, which was crazy. I haven't had any trackback spam though since adding the trackback validator which is fantastic.

Re: Added Two New Plugins To Increase WordPress Spam Protection

Quix0r — Thu, 14 Dec 2006 05:43:48 -0000

I have found a german post about this math-plugin. He found out that a spammer can very easy find out a hash and the matching result. So please add a "secret key" to your wp-config.php when not already done:

define('WP_SECRET', "wordpress-xxxxxxxx");

By xxxxx is something random typed by your finger-random-generator... ;-) And do never every expose this to public. :) Now you just need to add this to the plug-in code where it generates the code and where it compares it with the hidden one from the form.

If you like, add this code to the hashing parts as well:

filemtime(__FILE__).":".filemtime(ABSPATH . "wp-config.php");

This shall add more entropy to the hash. Finally add - when your blog support his - the number of views or reads of the current post plus title. This is much more secure against "guessing" the current hash.