Captcha does not seem to be working on our blog. (http://www.waterthebamboo.com/_blog/Blog) We are receiving Spam comments multiple times per day. Shouldn't Captcha/Image Verification prevent Spam posts from being submitted via the Form? It's a real pain to have to dig through all these spam posts in the admin.
It's possible that there are OCR-capable bots hitting your blog. But there are also tons of people who do nothing more than post spam links on blogs all day long ("work at home" scam jobs, SEO scammers, etc.). If you comment section allows links to be followed by search engine bots you're gonna get hit hard with link spam, so make sure comments are set to "nofollow" and moderate them.
Hey Mario - Hey ya i know long time No see!!!! how ya been ....
Thanks for this - The captcha settings wasn't set to enforce - so i ticked it for everything . Why would it not enforce though automatically?
Also - with that meta robots thing do i place it on the blot main layout? or just on the post? and what does this do - i tried reading that doco but it was a bit confusing.
so it doesnt stop regular search bots from following???
Thanks again for your help mario
I have tried the captcha thing (turning it on) but still getting some spam so I am looking into trying the No Index no follow
The thing is I was researching it and it looks like if I used the <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"> that would stop search engine bots from indexing the blog posts?? Would that mean that the website would not get the SEO benefit from all posts? http://googlewebmastercentral.blogspot.com.au/2007/03/using-robots-met a-tag.html
I am not sure if I am correct on this does anyone have any feedback on this?
Is there any other way to try and stop bots from filling out the comments? seems these ones are either human or bypassing the captcha still ..... hmmmm
I have clients coming at my left right and centre as there has been a massive amount of #paydayloans etc coming through, they don't end up in your unapproved ... it's a little odd. I have heaps on my own site too but they don't show on the blog, in the unapproved but do in the live feed. Is there anything happening at the moment to stop the blogs being exploited?
Any link can be changed to nofollow by adding the tag as shown:
<a href="http://www.example.com/" rel="nofollow">Link text</a>
You can meta a bots nofollow, but remember, if you WANT a link YOU post in your blog to be followed (because a GOOD follow is helpful.) you cannot use the nofollow AND it's futile against humans.
You can use the above example to modify a URL field.
We are getting lots of SPAM on this URL - http://www.theartofvacationing.com/_blog/Timeshare_Talk/post/When_is_M arriott%27s_Maintenance_Fees_NOT_Maintenance_Fees/#comments
All posts.
We are getting it as well from "cash advance loan".
Our site: www.lechameauUSA.com
The spammer's email: fkokooeelel@gmail.com. I can forward you the customer comment form if it would help.
Chuck
(And yes, I have CAPTCHA activated and the settings are enabled.)
Not what this is about :) a bot is not just a search bit and no-follow is an indicator not a mandatory statement :p
Spam bots crawl the web filling out forms and have a variety of captcha bypass abilities, some are malware that fill in forms as a person is browsing websites with their infect machine efc.
We have also had a dramatic increase in spam over the last 6 weeks (www.changedesigns.net) on all comment forms on products, web pages, blogs, and announcements. Enforce captcha validation has been set (ticked) for everything but it is still not prenenting the flood. We have to daily manually delete stacks of spam comments and it is taking up a lot of time.
It looks as though it is definitely a bot and not a human as I had previously commented out a comment form in the announcement layout but the bot still used the commented out code in the served page to execute the form submission while bypassing the captcha. I did a bit of research and it seems that the spammers can buy cracked codes for websites and then they keep refreshing the captcha until they get the word for the cracked code and then the form submission succeeds. BC is going to have to regularly change the codes on the backend to prevent this.
An email blacklist wont help as they never use the same name or email address twice, they are randomly generated with every attack. For the current bots the only thing in common is their injected url which is always around the theme of loans or cash but this could change.
Just for claritys sake the spam doesnt make it onto the live webpage since we moderate all comments and so just delete them on the backend. The other hassle with the spam bots is them creating hundreds of new clents in the CRM database all the time, which we then have to delete.
Indeed Mike, deletinfg all the auto created CRM records is also a pain.
I hope this will also be looked at, maybe give us the option to NOT create a CRM user record when somebody comments on a blog?
Also some kind of rule creation similar - or better - than WordPress, i.e. if comment includes a link or HTML, then give error or warning to user without actually allowing comment at all?
hi all .. so i also have been getting hit with this issue ... i have a faq page well about 40 of them in fact.. only one is being tagetted with this .. never a comment made just 4 or 5 hits a day with bogus emails. like this haolhlhdlch@gmail.com and so on .. painful to remove from crm as already disscused .. would be nice to be able to have 1click remove all .. or have i missed it ??? anyway just to keep all informed .. i dont understand what the benift is to anybody doing this .. unless they just get a kick out of wasting their time
Oh, that would be nice.
Vincent-1 wrote:
Indeed Mike, deletinfg all the auto created CRM records is also a pain.
I hope this will also be looked at, maybe give us the option to NOT create a CRM user record when somebody comments on a blog?
Also some kind of rule creation similar - or better - than WordPress, i.e. if comment includes a link or HTML, then give error or warning to user without actually allowing comment at all?
I've been rewriting my forms to be generated by javascript on the (maybe now obsolete) premise that bots parsing a webpage won't be able to run the js and 'see' the form there. I have no idea if this is even effective though, and of course a bot doesn't need an html form to post in the first place...
i am now in the process of creating a new site through wordpress and will now compleatly remove every site i have and my clients sites that i was going to create ...will also be wordpress sites .. had enough of te bad service and lack of support when it comes to css matters and the sytem also changing script .. all my transaction have been cancelled .. the only way for me to see a real future for this is to make vast changes .. i will not be waiting for them so for me its good bye ![]()
I encountered this problem as well and was getting 4 or 5 of the payday loan comments a day on one client's site. I eventually changed the blog URL and each of the exisitng blog post URLs, and the problem has diminished greatly.
It has to be some sort of automated posting program that they are using, so I advised not using any of the default URLs.
Good luck.
North America
Europe, Middle East and Africa
Asia Pacific