Second time hacked forum - Bug Reports - wpForo 2.0

RE: Second time hacked forum

VereK — Fri, 11 Aug 2023 15:14:11 +0000

For example any others popular forums hide from index user profiles. ALL

This can easily be done in WPforo settings

RE: Second time hacked forum

dimalifragis — Fri, 11 Aug 2023 12:45:36 +0000

@annushka Spammers SHOULD/MUST be stopped BEFORE getting in. At least most of them.

Tricks like hidding and noindex/nofollow doesn't help much AFTER getting in.

Also Forums MUST have a moderator that is very active. There is no set-it-and-forget-it with Forums.

RE: Second time hacked forum

annushka — Fri, 11 Aug 2023 00:11:15 +0000

@martin target any spammers - backlinks (url in forum profile). Best solution if all wpforo exclude any url from member profile. Without backlinks' wpforo not interested for spammers. This is solution must have all wpforo owners. Because backlinks not possible on my forum only but others wpforums available backlinks my forum steel have spam attacks because save in base spammers. But if no one wpforo exclude urls in profile spammers stop use all wpforo.

For example any others popular forums hide from index user profiles. ALL

Sorry for my poor English. I hope you understand me.

Best Regards
Alena

RE: Second time hacked forum

Jupiter — Fri, 14 Jul 2023 14:18:19 +0000

I have been using WPForo - Custom Fields on my site. I create a question on the registration page that is required. It is a question tailored for the users of my site. The correct answer is also 9-10 characters, so I limit the field to only allow that many characters.

I then MANUALLY approve each new user based on their question response. The response is part of the notification email that I get when they register. So I know right away if they are legit or not.

This has worked extremely well to stop spam on my site.

It works great for my site with 2500+ members. Obviously won't work for everyone, but a great place to start.

RE: Second time hacked forum

VereK — Fri, 14 Jul 2023 11:44:56 +0000

@verek That is why i wrote "with some technical skils".

An other alternative is Ninja Firewall for WP+ but the PAID version. It has all you mention above.

+1 That's what I would use if I needed a GUI based system.

RE: Second time hacked forum

dimalifragis — Fri, 14 Jul 2023 11:39:34 +0000

@verek That is why i wrote "with some technical skils".

An other alternative is Ninja Firewall for WP+ but the PAID version. It has all you mention above.

RE: Second time hacked forum

VereK — Fri, 14 Jul 2023 11:37:36 +0000

@dimalifragis I know CIDRAM from the ZB Block integrations days. It's an excellent tool for those who know how to tune it but perhaps a little too complicated for the average forum admin on ...

RE: Second time hacked forum

dimalifragis — Fri, 14 Jul 2023 11:23:01 +0000

@verek All you need is

https://wordpress.org/plugins/cidram/

and some technical skils.

RE: Second time hacked forum

VereK — Fri, 14 Jul 2023 11:04:43 +0000

The best spam protection is to stop them from registering in the first place. Any security software that does not call on the SFS API (their database is kept up to date by Admins like us) at the very least is next to useless. A plus would be if it also calls on Project Honeypot. For me a must have is also Geo blocking. Likely you will needed at least two separate security systems to deal with it.

RE: Second time hacked forum

Robert — Fri, 14 Jul 2023 08:29:13 +0000

You not planning fixed bug with spam?

Hi @annushka,

Spam is not a bug. And a bug cannot cause spam. Spam is a worldwide issue. All WordPress website s are under spam attacks and the spam comes to forum from your WordPress. This is not a wpForo bug. There is not a bug which can be fixed to prevent spam.

Again, the plugin I suggest is the best solution that we use in all our forums. But you should collect spammy words and use them in the plugin to detect and stop spam. next time when you get spammed copy and save some spam posts and find most popular words in the spam posts to use in the plugin.