{"id":2176,"date":"2013-07-23T09:55:08","date_gmt":"2013-07-23T09:55:08","guid":{"rendered":"http:\/\/sgis.co.uk\/blog\/?p=2176"},"modified":"2014-08-14T10:57:22","modified_gmt":"2014-08-14T10:57:22","slug":"reduce-spam-on-wordpress","status":"publish","type":"post","link":"https:\/\/sgis.co.uk\/blog\/2013\/07\/reduce-spam-on-wordpress\/","title":{"rendered":"Reduce spam on WordPress"},"content":{"rendered":"

WordPress is a fantastic platform for creating your website, however due to it’s popularity and the fact it’s open source it can come under attack from spam if not managed correctly. We have taken a look at some ways to help reduce the amount of spam your website receives.<\/p>\n

WARNING: Some of these tips require you to make changes to core code. Always remember to make a full backup of your site and SQL database before attempting to make these changes as errors could leave your site unusable.<\/strong><\/p>\n

1. Add a CAPTCHA test before comments can be submitted.<\/h2>\n

A CAPTCHA test is designed to find out whether the person submitting the comment is human. They are fairly common now on the web and the idea is to display a set of characters that are slightly distorted so only a human can identify the correct pass phrase. Luckily WordPress offers lots of plugins to easily add this functionality.<\/p>\n

Captcha<\/a>
\nSI CAPTCHA Anti-Spam<\/a>
\nEasy Captcha<\/a>
\nSuper CAPTCHA Security Suite – One and Only 3D CAPTCHA<\/a>
\nConfident CAPTCHA<\/a>
\nEnmask Captcha<\/a>
\nBlue Captcha<\/a><\/p>\n

2. Anti-spam plugins<\/h2>\n

In addition or in place of CAPTCHA WordPress also has other anti spam plugins.<\/p>\n

Akismet<\/a>
\nComments submitted are checked against Akismet’s database and spam comments are filtered automatically.<\/p>\n

NO CAPTCHA Anti Spam<\/a>
\nWorks in the same way as Akismet.<\/p>\n

WP Anti Spam<\/a>
\nIncreases the comment filter options from the admin area.<\/p>\n

3. Don’t publish comments until they’ve been approved.<\/h2>\n

Ticking this box ensures comments can’t appear on the site until they’ve been approved by an administrator. You can choose to be less strict by setting an option to allow comments to appear if the person has been previously approved.<\/p>\n

\"Screen<\/p>\n

4. Keep WordPress up-to-date<\/h2>\n

Always make sure you’re using the most up-to-date release of WordPress as there are regular updates and fixes – some of these will help fight spam or fix problems which spammers where previously able to exploit.<\/p>\n

5. Block Spammers’ IPs<\/h2>\n

If you’re receiving regular spam comments or messages from a selection IP addresses then it is possible to block any further visit from this IP. To block a spammer’s IP address you need to add the below code to your .htaccess file.<\/p>\n

\r\nOrder allow,deny\r\nDeny from 123.123.123.123\r\nDeny from 156.156.156.*\r\nDeny from 189.189.*.*\r\nAllow from all\r\n<\/pre>\n
Please note <\/strong>– adding a star to the IP will block any thing starting with that IP address. For example 189.189.*.* will block any IP starting with 189.189.<\/p>\n
6. Deny Access on No Referrer Requests<\/h2>\n
Another helpful addition you can make to your .htaccess file is to add some code to block bots with no refer. When a visitor adds a comment to your site they would have been referred to the wp-comments-post.php from your blog page – spam bots often bypass this and target the wp-comments-post.php file directly. Adding the below code stops the bot from being able to do this.<\/p>\n
\r\nRewriteEngine On\r\nRewriteCond %{REQUEST_METHOD} POST\r\nRewriteCond %{REQUEST_URI} .wp-comments-post\\.php*\r\nRewriteCond %{HTTP_REFERER} !.*yourdomain.com.* [OR]\r\nRewriteCond %{HTTP_USER_AGENT} ^$\r\nRewriteRule (.*) http:\/\/%{REMOTE_ADDR}\/$ [R=301,L]\r\n<\/pre>\n
Please note<\/strong> – you need to replace yourdomain.com with your actual domain name. <\/p>\n
7. Completely disable wp-comments-post.php and wp-trackback.php scripts<\/h2>\n
This is an extreme solution and is only really useful if you don’t want to use the comments functionality of WordPress. To disable these files simply rename them via FTP or via File Manager. For example rename the file from wp-comments-post.php to wp-comments-post-blocked.php. This will mean when a bot or anyone tries to send a comment the necessary file to process it will not be found.<\/p>\n
\"Screen<\/p>\n
Please note<\/strong> – deleting the file will give the same result but renaming allows you to easily turn this back on. Also when updating WordPress you will need to redo the name change.<\/p>\n","protected":false},"excerpt":{"rendered":"
WordPress is a fantastic platform for creating your website, however due to it’s popularity and the fact it’s open source …<\/p>\n
Read article<\/a><\/p>\n","protected":false},"author":1,"featured_media":879,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,4],"tags":[27,29],"class_list":["post-2176","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hosting-guides","category-latest-news","tag-wordpress","tag-wordpress-plug-ins"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t