• Resolved hadarhacohen

    (@hadarhacohen)


    I built this web for my customer site few months ago.
    Few days ago I reviewed the web site and find out that the forum has 79000 (!!!) requests for password reset…!!!!
    These are obviously not real!!
    I tried to delete them, but it takes long time. How can I delete these fake requests?
    How can I prevent this from reoccurring?
    Also, I checked on “Google Translate Console”, and find 9 pages like this:
    https://migdal-or.org.il/community/profile/situs-slot-paling-gacor-mudah-menang/
    This page is definitely not part of the website!! How can I delete these, and how should I prevent these from reoccurring?
    Thanks
    Hadar

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author gVectors Team

    (@gvectors-team)

    Hi @hadarhacohen,
    It seems you don’t protect your website. I don’t even see reCAPTCHA on the registration page. The spam user registration cannot be stopped by forum plugin. You should protect your registration page using different solutions. Please let me know whether you have seen the wpForo notification box after installing it:

    Also, we have a FAQ topic instructing you to use some antispam solutions to protect your website user registration form: https://wpforo.com/community/faq/how-to-stop-spam/

    As an alternative solution, you can disable user profile access to not logged-in users and search engine by disabling the “Can view profile” permission for Guest Usergroup in Dashboard > Forums > Usergroups admin page.

    Thread Starter hadarhacohen

    (@hadarhacohen)

    Hi
    This is strange, I will check this out.
    Please keep this topic open for one or two more days, let me respond.

    Beside the protection – is there an easy way to clean the fake / spame notices?

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘BOT attack on my forum’ is closed to new replies.