Spam comments without comment forms?

  • Hi all. I’m having an odd issue.
    I recently switched over to Disqus comments and removed WordPress’ own comment form entirely, yet from the backend I see I still get spam comments on posts?

    How is this possible?

    Disqus is not synced with the database, I installed it solo.

Viewing 4 replies - 1 through 4 (of 4 total)

  • Spambots are ruthless, even if you have Disqus installed they will show. Do you have Akismet or a spamming plugin activated?

    Thread Starter wohoo

    (@wohoo)

    I thought I didn’t need Akismet once the interface to post comments was gone. I guess I’ll re-install it.

    How can they spambots send information to the database though without an actual form?

    Moderator Ipstenu (Mika Epstein)

    (@ipstenu)

    ?????? Advisor and Activist

    By passing the data directly in via a URL.

    I would install Bad Behavior, which will stop them before they can post. Also the Cookies for Comments plugin.

    Or block no-referrer spambots directly via .htaccess:

    # protect from spam comments
RewriteEngine On
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{REQUEST_URI} .wp-comments-post\.php*
RewriteCond %{HTTP_REFERER} !.*example.com.* [OR]
RewriteCond %{HTTP_USER_AGENT} ^$
RewriteRule (.*) ^https://%{REMOTE_ADDR}/$ [R=301,L]

    Change “example.com” to your domain, and {REMOTE_ADDR} to wherever you want to send the spambots

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Spam comments without comment forms?’ is closed to new replies.