Months ago, there was a bug in wpForo that would allow spammers to still post spam even with the setting to moderate the first 2 posts for new users. The problem was that a spammer could post 3 posts and the third one would pass moderation and be posted live in the forum for all to see. That problem is now back, but with a new problem. I'll explain with screenshots below.
I have moderation set to 1 post for all new users. But now new spammer users are signing up, posting one post that goes into moderation, then posting another which is publicly available in the forum. However, that second one is difficult to remove -- you can't view it directly in the forum, so I have to edit the database, which can be a bit scary. Of course, I backup the whole site before I do that.
Here's how the two posts look on the Recent Posts page: https://cl.ly/19646ec3fb01
Here's how they look in the forum list: https://cl.ly/09e7d0150273
When I view the unapproved post, it looks normal: https://cl.ly/f4f78e96c069
When I click the post that got through moderation, it takes me back here: https://cl.ly/1976c63d1e2b (this is the one that I have to remove manually in the database)
Hi @wendell,
That problem is not back, you just need make sure your options are right. The "Posts must be manually approved" option should be enabled fro new users in Dashboard > Forums > Tools > Antispam Tab. Also the Spam Control should not be disabled and the minimum posts of New users should be set more than 0.
This issue is only related to HTML titles. When spammer inserts HTML link in topic title wpForo removes all HTML so you see an unapproved topic without title. There is no any bug and it's not related to any old issue. We may add some default phrase for this case and if a spam topic is created and the whole title is an HTML code of a link it'll be replaced with that phrase instead of leaving it empty.
