Discussion for non-logged-in users

Please don’t bump your posts.

First, upgrade to 3.1.4 if you can. Then try turning off your plugins. You may have one that’s causing the default WP behavior to not function correctly.

Thank you for your reply.

That’s the thing. When I view a blog’s post while logged out, I get the “you need log in to leave a comment” so it does work, so I don’t understand how someone else/robot can leave a comment without registering and logging in

Thanks

That’s because bots inject data into the processor itself, it doesn’t submit it through the form you are using. It submits the data pretending it IS the form so it doesn’t have to be authenticated or go through the basic error checking. That is why you can remove text fields from the forms all together and bots can still post to them as if they still exist. It’s because WordPress was not built with that security in mind. There are plugins that prevent this but it should have been a built in security check since day one.

Thanks
What plugin can you recommend to avoid that?

Akismet, Cookies for Comments, and/or Bad Behavior. Between them, I rarely get any.

Also, since you only want logged in users to comment, you could toss in a check for “Comment author must have a previously approved comment” – That will leave your regulars alone and only bug the newbies.

I’ll check out the 3 plugins you gave me, Akismet is no longer a freeware as I understand

And the option of “must have a previously….” is already checked

Thanks

Akismet is no longer a freeware as I understand

No no, still free ??

If “must have a previous…” is checked, these guys shouldn’t be able to have their posts show up publicly, though they would still on the back end. Are they showing up on the front end?

How is it free? it is asking for a key or something to activate it, what am I missing?

I checked another option that the admin must approve so I keep getting comments to approve but they are spam, I want to avoid it

Thanks
for now I’m using bad behavior… I’ll see how it goes

https://akismet.com/signup/

Choose ‘Personal blog’ and set Yearly contribution to $0.