My site has a lot of fake registers as the domain name like: email.imailfree.cc, imailfree.cc, mailbox.imailfree.cc…
Identifiant : test8503099
E-mail?: [email protected]
Identifiant : test23157723
E-mail?: [email protected]
Identifiant : test13613021
E-mail : [email protected]
And I have blocked like this in your plugin: https://prnt.sc/_QMBZ31yZRlk
After that, but still get the fake registers.
Could you show me how to block all those fake users completely please?
Thank you.
]]>I’ve tried blocking them with WF to no avail.
I went to Blocking > Custom Pattern > and entered wintds.org in the Hostname, Browser User Agent, and Referer.
Any advice or guidance is appreciated, especially if I’m simply doing this incorrectly.
]]>I have NOT ‘Anyone can register’ ticked.
Having enabled debug I can see they are managing this via your forum plugin.
Here is an extract of the debug.log. Please can you let me know how I can stop this?
Thanks
1) /home/.../index.php(17): require('/home/...')
2) /home/.../wp-blog-header.php(16): wp()
3) /home/.../wp-includes/functions.php(1285): WP->main('')
4) /home/.../wp-includes/class-wp.php(758): do_action_ref_array('wp', Array)
5) /home/...wp-includes/plugin.php(544): WP_Hook->do_action(Array)
6) /home/.../wp-includes/class-wp-hook.php(311): WP_Hook->apply_filters('', Array)
7) /home/.../wp-includes/class-wp-hook.php(287): wpForo->init(Object(WP))
8) /home/.../wp-content/plugins/wpforo/wpforo.php(297): do_action('wpforo_after_in...')
9) /home/.../wp-includes/plugin.php(478): WP_Hook->do_action(Array)
10) /home/.../wp-includes/class-wp-hook.php(311): WP_Hook->apply_filters(NULL, Array)
11) /home/.../wp-includes/class-wp-hook.php(287): wpForoAction->do_actions('')
12) /home/.../wp-content/plugins/wpforo/wpf-includes/class-actions.php(131): do_action('wpforo_action_w...')
13) /home/.../wp-includes/plugin.php(478): WP_Hook->do_action(Array)
14) /home/.../wp-includes/class-wp-hook.php(311): WP_Hook->apply_filters('', Array)
15) /home/.../wp-includes/class-wp-hook.php(287): wpForoAction->registration('')
16) /home/.../wp-content/plugins/wpforo/wpf-includes/class-actions.php(349): wpForoMember->create(Array)
17) /home/.../wp-content/plugins/wpforo/wpf-includes/class-members.php(262): register_new_user('test38711360', 'test38711360@td...')
18) /home/.../wp-includes/user.php(2578): wp_create_user('test38711360', 'iq5tsxsR3ZLs', 'test38711360@td...')
19) /home/.../wp-includes/user.php(2188): wp_insert_user(Array)
20) /home/.../wp-includes/user.php(1860): apply_filters('insert_user_met...', Array, Object(WP_User), false)
21) /home/.../wp-includes/plugin.php(206): WP_Hook->apply_filters(Array, Array)
22) /home/.../wp-includes/class-wp-hook.php(289): {closure}(Array, Object(WP_User))
23) /home/.../wp-content/plugins/wpum-registration-trace/wpum-registration-trace.php(44): wpum_trace('wp_insert_user ...')
]]>‘Anyone can register’ is NOT ticked. I have read that user registration in that case is impossible and that I must have been hacked but I can see no other sign of hacking and the new users were set to subscribers (the default role).
Can anyone shed any light on this?
]]>Hi, my site has a very small forum that’s been running for the last 5 months.
Since setting it up I’ve had perhaps 5 fake accounts try and register but never get past the email validation stage so I could easily delete them.
Today I found around 20 new users, all Approved, all passed email validation with the names a variation of [email protected].
I always receive an email when a new user has made an account – even if they haven’t passed verification, but got nothing for these fake accounts.
I just tried making a test user and received an email and it has been placed in email validation check. So how did this happen with the 20 fake users?
I have ‘Anyone can register’ disabled and am using Google ReCaptcha UM addon.
Thank you
]]>