johanadler

I trust you, no need for URL. You referred to ‘bcc’, just wanted to be sure you had tried ‘bcc:’.

Have not tried it with comments.

Just a thought, did you put your rule before or after WordPress’ addition to the .htaccess?

I think WP will catch any request for a non-existing file or directory and handle it internally, so you would need to have your own rules first, leaving anything you do not handle to WP.

Are you using the exact phrase ‘bcc:’, all four characters? That’s the one that gave me trouble.

Sure, if I knew which plugin it could be I would talk to the author personally, but this was a major problem for me for two days, and other people are likely to use the plugins I am using, so someone else could run into this too some day.

A full search of the plugin directory shows that the only occurence of ‘bcc’ is a function call by the backup plugin.

wp-db-backup.php calls $phpmailer->ClearBCCs()

Searching all files in my public_html shows that wp-includes/pluggable.php makes the same call, and that wp-includes/class-phpmailer.php seems to be able to handle bcc:s, having a bunch of references to it. No other file mentions this.

A quick look at the now deactivated WP-ContactForm: Akismet Edition that never worked for me anyway, shows that it will filter out the phrases to: and cc: but only in fields of the intended email it should send. No mention of bcc:.

If the error is not in WP core it ought to be in a plugin that is filtering post text, not in a plugin of a more administrative kind. So the widget plugs, the microformat, backup etc should hopefully not be part of this. Seems silly too, barfing about a bcc: in the middle of a post, which is why I wanted to report it in the first place.

Check Tom Raftery’s solution to trackback spam. Works great!

In the three examples you posted, there is just one server you need to block.

Johan Adler
https://nyfiken.org/