lelandf / stop-signup-spam Goto Github PK
View Code? Open in Web Editor NEWWordPress plugin that checks email addresses from new registrations against the Stop Forum Spam database.
License: GNU General Public License v2.0
WordPress plugin that checks email addresses from new registrations against the Stop Forum Spam database.
License: GNU General Public License v2.0
=== Stop Signup Spam === Contributors: lelandf Tags: spam Requires at least: 2.7.0 Tested up to: 4.7.5 Stable tag: 1.1.0 License: GPLv2 or later License URI: LICENSE Check user registration info against the Stop Forum Spam database before allowing registration == Description == Stop Signup Spam will prevent user registration of anyone trying to sign up with an the email address or IP address that has been reported to [Stop Forum Spam](http://stopforumspam.com/). Contrary to what the name implies, Stop Forum Spam can be used with any web service, not just forums. At this time, Stop Signup Spam integrates with: * The core WordPress registration form * Restrict Content Pro * MemberPress * Give By installing this plugin, you consent to an API call sent from your WordPress site to Stop Forum Spam after every attempted user registration. The API call includes the user’s email address and IP address. It is a similar concept to [Akismet](https://wordpress.org/plugins/akismet/), except instead of checking for blog comment spam, it checks for user signup spam. Unlike Akismet, no API key is required to query Stop Forum Spam’s database. Partly because of this, I decided not to include a settings page in the Stop Signup Spam plugin. Just activate and you are all set. The plugin does not log any user registration info. Any data sent to Stop Forum Spam would fall under their [privacy policy](https://www.stopforumspam.com/privacy). Please note that Stop Forum Spam is a third-party service that I have no affiliation with. I just found it, could not find any existing WordPress plugins that worked with it, and built one myself. It has helped me cut down on signup spam on a free membership site that I run, and I hope it will help you do the same. == Installation == 1. Upload the plugin files to the `/wp-content/plugins/stop-signup-spam` directory, or install the plugin through the WordPress plugins screen directly. 2. Activate the plugin through the 'Plugins' screen in WordPress 3. That is it. There is no settings page. == Frequently Asked Questions == = Stop Forum Spam thinks I am a spammer. Can you help me? = No. I am not affiliated with Stop Forum Spam. You can request removal on their [Removal Request](http://stopforumspam.com/removal) page. = I want to temporarily disable the plugin. Can you add a settings page so I can do that? = No. Since the plugin has a very specific purpose, and I would like to keep setup as seamless as possible, it would be best if you deactivated the plugin if you wanted to temporarily disable it. = I use another plugin to handle registrations to my WordPress site. Will you integrate with it? = Please understand that this is a free plugin, which I built out of necessity because spammers were flooding my RCP-powered membership site with bogus registrations. I do not have time to integrate with every membership plugin under the sun. With that said, I am not opposed to [pull requests](https://github.com/lelandf/stop-signup-spam) if you would like to contribute an integration of your own. = A spammer signed up to my site even though this plugin was active. Why? = At this time, all this plugin does is check the registration email address and IP against the Stop Forum Spam database. If either the email address or the IP address appear to be spam according to Stop Forum Spam, this plugin will not allow registration. If Stop Forum Spam reports a false negative, feel free to [report it](http://stopforumspam.com/add) to them so they can have a more accurate database. = Will your plugin ever do anything more than simply check email and IP addresses against Stop Forum Spam’s database? = As I discover new, accessible ways to thwart signup spam, I may amend this plugin to reflect those. In the meantime, if you have any ideas, I am not opposed to [pull requests](https://github.com/lelandf/stop-signup-spam). = Can I block spam bots from ever accessing my site with this plugin? = No. It is probably best you block this traffic at the DNS level anyway. Services that provide web application firewalls, such as Cloudflare and Sucuri, may be able to help. = I am confused. What is the difference between Stop Forum Spam and Stop Signup Spam? = Stop Forum Spam is a third-party service that maintains a database of spam reports. Stop Signup Spam is a WordPress plugin that integrates with that service. == Changelog == = 1.1.0 = Add Give integration. Props: #4 = 1.0.3 = Add MemberPress integration. Props: https://wordpress.org/support/users/cartpauj/ = 1.0.2 = Use HTTPS for Stop Forum Spam API URL to prevent HTTPS sites from throwing connection errors. Props: https://github.com/wolffe = 1.0.1 = * No longer trust HTTP_X_FORWARDED_FOR, which can be spoofed = 1.0.0 = * Initial release
Would love to have a "Delete and Report" option in the User Bulk Options dropdown:
Should be self-explanatory, but this would do several things simultaneously:
This will help with moderation of users to actually store/save the IP address from which they registered from. In case they actually ARE a spammer but get through the database, you could later report them with both the email address and IP address.
Would be great to integrate with https://givewp.com
PR coming soon ;-)
I'll look into this. Shouldn't be too difficult. Lots of things integrate with CF7.
Give donation forms occassionally also get spam donors or donations via our donation forms. The previous integration only supported our [give_register]
shortcode. This would integrate directly with our donation forms as well.
PR forthcoming.
When a user registration is blocked, it would be very helpful to have a log of that somewhere. Naturally, most WordPress users would prefer a UI log, perhaps as a sub-menu item under the "Users" main menu. But even just a text file log stored safely in wp-content would be useful to check against.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.