Make WordPress Core

Opened 9 years ago

Closed 9 years ago

#30442 closed defect (bug) (worksforme)

Commenting requires registration; unregistered spam bots still manage to comment

Reported by: eldimentio's profile eldimentio Owned by:
Milestone: Priority: normal
Severity: normal Version: 4.0.1
Component: Comments Keywords:
Focuses: Cc:

Description

I run a Chinese blog and the only plugin I have installed is one that enabled the use of a Chinese captcha upon registration. This is extremely good at keeping all bots from registering. I have banned unregistered people from commenting and for over a year this had been working flawlessly. No unwanted successful registrations and comments only from my small group of known users. Then around a month ago I started getting spam comments again, not too many but still, they shouldn't be allowed to comment!

Change History (1)

#1 @dd32
9 years ago

  • Milestone Awaiting Review deleted
  • Resolution set to worksforme
  • Status changed from new to closed

Upon testing both the HTML form handler and the XML-RPC endpoint, I'm unable to find any way to create a comment when comment_registration is enabled.

One possibility that the spam comments you're seeing are due to a bug in the plugin, or alternatively, could be pingback or trackbacks which look/act like comments in WordPress, and don't respect the comment_registration flag.

If you're still seeing the problem, you should try the Support Forums to diagnose the issue, if a core bug is found, you can re-open this ticket.

Note: See TracTickets for help on using tickets.