• Resolved delemo

    (@delemo)


    Hello,

    On a professional directory site allowing users to register to present their skills, I am facing abusive account registrations.

    The registration form is already protected by Google reCaptcha, installed by Gravity Forms.

    Can Wordfence help me to limit these unwanted account creations?

    Thank you

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @delemo, thanks for contacting us about this.

    We provide reCAPTCHA also, but for the default registration/login forms provided with WordPress and WooCommerce rather than custom forms at the current time. We do find that this normally does reduce spam registrations for our customers, but you can also take other steps such as “Disable XML-RPC authentication” in Wordfence > Login Security > Settings. You can also block this route entirely using .htaccess provided you don’t use the WordPress app or a plugin that requires it such as Jetpack:

    # Block WordPress xmlrpc.php requests
    <Files xmlrpc.php>
    order deny,allow
    deny from all
    </Files>

    Thanks,

    Peter.

    Thread Starter delemo

    (@delemo)

    Hi Peter,
    This is quite technical but thank you for your answer.
    Best regards.

    Plugin Support wfpeter

    (@wfpeter)

    No worries, the XML-RPC code above can be added to a file that should be called “.htaccess” in the root directory of your WordPress site. You can normally find this via FTP or your host’s file manager and browsing the main directory of your site.

    Your host can normally assist if you’re not comfortable making these changes yourself.

    Peter.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Can Wordfence help to limit improper account registration’ is closed to new replies.