Best Practices for Preventing BuddyPress Spam User Registrations | Wptuts+ - 0 views
-
The first level of security is to change the footer text to remove mentions of WordPress and BuddyPress. Spammers target the words “proudly powered by WordPress and BuddyPress” in search engines to find sites they can compromise.
-
In BuddyPress, the default URL for the registration page is “http:/yoursitedomain.com/register”. This is why spambots include the “insite:register” when performing the search described in the above section. Make it harder for them to find your site by easily changing the default slug for BuddyPress in your wp-config.php file.
-
We use the honeypot technique to thwart spambots and it has worked pretty well from our experience. I didn’t invent the idea, but I built this implementation for BuddyPress and it works like a champ.
- ...4 more annotations...
-
All you need to do is set the slug for the registration page that has been created. If you’re on BuddyPress 1.5+ that is.
-
It enables you to block IP addresses and even entire domains from accessing your site, a very useful thing to do against known bots trying to create fake BuddyPress user accounts.
-
Be wary of trying every single security plugin under the sun, as this slows down your site and adds to your maintenance workload by having more things to update and go through if something breaks. At first, stick to the highest rated ones that have proven themselves over time with a lot of users. One such plugin, which is highly recommended by many BuddyPress and WordPress users, is Bad Bahavior. This plugin will not only block a lot of spam, but will make your site invisible to many bots in the first place and thereby prevent fake registrations.