Notifications
Clear all

wpForo 1.x.x [Closed] Spammers got through the moderated post requirement

5 Posts
4 Users
0 Likes
1,557 Views
Wendell
Posts: 242
Topic starter
(@wendell)
Reputable Member
Joined: 7 years ago

I have wpForo set so that new users must have 1 post moderated before they can post freely in the forum.

However, two users managed to create new accounts and post freely immediately. There were 80-something spam posts in my forum when I awoke this morning, despite this setting:  https://cl.ly/2K432F442t3M

I received the email notifications that a new posts needed to be moderated, then a flood of email notifications of new topics, which were all the spam posts. Upon visiting the initial posts, they indeed were still awaiting approval (they had not been approved yet), but somehow those same users were able to post over 80 posts that didn't need approval. I'm not sure how they did it and that's why I'm here posting this message right now.

Any ideas?

4 Replies
Sofy
Posts: 4235
 Sofy
Admin
(@sofy)
Support Team
Joined: 6 years ago

Hi  Wendell,

Our team tries to find such a problem on our test websites to find some solution for you, please wait. I'll back to you as soon as possible. 

Wendell
Posts: 242
Topic starter
(@wendell)
Reputable Member
Joined: 7 years ago

Thanks Sofy!

It happened again last night.

I've also noticed that some legitimate users are able to register and post right away. They don't always require my moderation and I'm not sure why.

Robert
Posts: 10499
Admin
(@robert)
Support Team
Joined: 8 years ago

Hi Wendell,

First of all, I recommend you enable wpForo reCAPTCHA for registration page. It works fine, the old issue was fixed a while ago. So stop spammers at the gate of your forum.

Second, please be careful with the option "Ban users if post is suspected". You should keep checking all banned users every day. The spam suspicion is not 100% correct function it may ban real users.

Third, try to set the new user control until 5. And enable Akismet.

 

Posts: 1602
(@anonymous20)
Noble Member
Joined: 8 years ago

Wendell do you use ANY security plugin in your installation ?