Wordpress website getting spammed

[DHTiling]

I did see that and NO not discussed it with anyone except this thread.. that comment has an Oz email addy..?

- - - Updated - - -

And the comment I quoted above was left on this page: Slide 1 1 ? David Howe Tiling | Tiler in Durham

Which you can comment on even when not logged in as admin if you fill in all the details.

So we need to turn those off.

Ye i know but how..? :lol: not all of those pics you can comment on , just the ones steve did.

 

[DHTiling]

Mate, you have this as a comment....



How did they know I was going to login and take a look? Have you asked somebody about it or something?

p.s. - You only have three comments by the looks of it.

if you check trash , you will see more.

 

[Dan]

Okay lads, here's how you sort it.

In Settings > Discussion check the box that says "Users must be registered and logged in to comment"
Then Settings > General UNcheck the box that says "anyone can register".

Users then can't submit a comment unless logged in, and can't register to login in the first place.

Not sure what that spammy instructional post is I quote they're going about it a weird way. And clearly must be watching this forum thread too or something stalkerish like that.

 

[Dan]

You then get this. And can't register anywhere.

View attachment 47600

 

[DHTiling]

That comment went on before i posted it here i think , will need to check times..

- - - Updated - - -

p.s move this to the arms just in case.

 

[Dan]

You posted this thread 6 hours ago, so about 1pm. And that comment came in at 2:29pm or something like that.

 

[DHTiling]

p.s move this to the arms just in case.

- - - Updated - - -

p.s move this to the arms just in case.

 

[Dan]

Mate you're the only one with that posting issue on the forum by the looks of it! What's going on there dude? Try a different browser for an hour or something.

 

[DHTiling]

You posted this thread 6 hours ago, so about 1pm. And that comment came in at 2:29pm or something like that.

ah ok.. we were being stalked then :lol:


I just looked, seems you have sorted the settings you wrote above..

You a goodn ..

- - - Updated - - -

Mate you're the only one with that posting issue on the forum by the looks of it! What's going on there dude? Try a different browser for an hour or something.

I know, it's doing my nut in...

 

[Dan]

The Internet and dan are exactly the same things. Lol

 

[Dan]

I know, it's doing my nut in...

I'll take that back mate we've found another double post. If it's happening again, report them. But there's a small chance it's you two only. Might not be though.

 

[Alan.P]

You've been hacked ? is your user account here safe ? Dan ? as for the Arms, if it's someone here they could have access all area's, we had a similar thing on a forum I'm part of, went very nasty in the end.

 

[Dan]

Alan. Don't jump to conclusions. They left a reply to a post on daves website, like anybody can do. Or could have done rather, I've turned it off now.

And the post was in the public forum originally hence the mention of the times each was posted. So anybody at all could have read the post on the forum, then posted a way to fix it (or break it I'm yet to check the template they're talking about editing).

No hacking involved at all.

 

[Alan.P]

I wasn't jumping mate, I did put a ? after each comment, just rang a lot of bells and had similarities, that's all

- - - Updated - - -

I wasn't jumping mate, I did put a ? after each comment, just rang a lot of bells and had similarities, that's all

- - - Updated - - -

Now I'm double posting, and getting db errors

 

[Dan]

You were jumping to conclusions assuming it had something to do with the forum. It was nothing to do with the forum other than the fact Dave created a post asking about his website on the forum. It's nothing to do with the forum, or my user account.

It can scare forum members when people create a post asking if the forum has been hacked. So make sure you read the thread properly in future and you'll realise it was talking about Daves wordpress website, hence the title of the thread.

And what it came down to was just a comment on a blog post and Dave note realising you could comment on some. So he was getting spammed on those blog posts..... on HIS website. (I'll say that again there just in case people are still reading this and assuming it's anything to do with the forum - which is is NOT).

We run the very best and securest forum software, unlike some other forums that are running software that will soon be obsolete. And we also have a very high spec server with dozens of security features not just one or two. All 20-odd forums I manage get updated every single month to the latest supported version of the software. I'm on call 24/7/365 and get a text message, email, and phone call if I haven't responded, the moment anything even slightly worrying happens.

I'll not tempt fate or anything but I'm pretty sure we'll never get hacked. We're a mere tile forum in the UK. Russians, Americans and Chinese who hack a lot for profits would have no interest in us. And the mostly European-based Anonymous although get a lot of bad press, generally only hack those who try to silence somebody for doing good. So they'd not hack us either.

No small-time script kiddy would get past our defences.

I would imagine if your forum got hacked, it was poorly managed and hosted on a inferior server, running out of date software with known security loopholes in it. Because even free forum software like phpBB and myBB will get patches released the moment a security flaw is spotted. So somebody wasn't updating your forum by the sound of it.

Totally different level of forum management that is mate.

I just wanted to be very clear about this as it can cost member accounts if not cleared up and that's not fair given the fact you assumed incorrectly something minor.

Sorted now though. I clicked one button on Daves site and stopped comments, so he wont get spammed one bit via those.