Still getting spam

90 views
Skip to first unread message

cormanaz

unread,
Sep 29, 2007, 11:59:31 AM9/29/07
to reCAPTCHA
I have set up reCAPTCHA to screen comments on my blog posts, but I am
still getting spam comments. Does this mean it's being hacked around,
or that the spammers have figured out how to beat it, or do they
actually have humans typing in the words?

TIA...Steve

reCAPTCHA Support

unread,
Sep 29, 2007, 12:41:29 PM9/29/07
to reca...@googlegroups.com
Please see our FAQ on this issue:

HELP, I'm still seeing comment spam

There are two common issues that make reCAPTCHA appear to be broken, but are actually not problems.

  • Moderation emails: reCAPTCHA marks comments as spam, so if you get moderation emails when spam comments are sent, you will get moderation emails for all spam comments with reCAPTCHA. We highly recommend turning off moderation emails with reCAPTCHA.
  • Trackbacks and Pingbacks: reCAPTCHA can't do anything about pingbacks and trackbacks. You can disable pingbacks and trackbacks in Options | Discussion | Allow link notifications from other Weblogs (pingbacks and trackbacks).
--
reCAPTCHA: stop spam, read books
http://recaptcha.net

cormanaz

unread,
Sep 29, 2007, 12:59:46 PM9/29/07
to reCAPTCHA
Thanks for the reply. But I checked http://recaptcha.net/faq.html and
I don't see any such item. Is there another faq location?

The moderation emails are coming from Wordpress, and they're not pre-
marked as spam. I thought that someone could not send a comment
unless they completed the challenge. Is there a way to circumvent
it?

On Sep 29, 9:41 am, "reCAPTCHA Support" <supp...@recaptcha.net> wrote:
> Please see our FAQ on this issue:
>
> HELP, I'm still seeing comment spam
>
> There are two common issues that make reCAPTCHA appear to be broken, but are
> actually not problems.
>

> - *Moderation emails*: reCAPTCHA marks comments as spam, so if you get


> moderation emails when spam comments are sent, you will get moderation
> emails for all spam comments with reCAPTCHA. We highly recommend turning off
> moderation emails with reCAPTCHA.

> - *Trackbacks and Pingbacks*: reCAPTCHA can't do anything about

reCAPTCHA Support

unread,
Sep 29, 2007, 1:02:46 PM9/29/07
to reca...@googlegroups.com
On 9/29/07, cormanaz <cor...@crawdadtech.com> wrote:

Thanks for the reply.  But I checked http://recaptcha.net/faq.html and
I don't see any such item.  Is there another faq location?

On the wordpress plugin page. http://recaptcha.net/plugins/wordpress/

The moderation emails are coming from Wordpress, and they're not pre-
marked as spam.  I thought that someone could not send a comment
unless they completed the challenge.  Is there a way to circumvent
it?

Try going to your blog while you're not logged in as administrator. You won't see the comments that you are getting moderation emails about. That's because within wordpress, they are marked as spam.

Your best bet is to turn off the wordpress moderation email. Any comment where the reCAPTCHA is passed will not need moderation.

cormanaz

unread,
Sep 29, 2007, 1:56:23 PM9/29/07
to reCAPTCHA
Right. I guess my question is: How are these moderation requests
even getting through to me when they should not be submitted unless
someone responds correctly to the reCAPTCHA challenge? I just tried
submitting a comment with the wrong words. It kicked me back to the
comment form and there is nothing in the moderation queue. Sorry if
I'm being thick-skulled about this...

On Sep 29, 10:02 am, "reCAPTCHA Support" <supp...@recaptcha.net>
wrote:


> On 9/29/07, cormanaz <cor...@crawdadtech.com> wrote:
>
>
>
> > Thanks for the reply. But I checkedhttp://recaptcha.net/faq.htmland
> > I don't see any such item. Is there another faq location?
>

> On the wordpress plugin page.http://recaptcha.net/plugins/wordpress/

reCAPTCHA Support

unread,
Sep 29, 2007, 4:50:18 PM9/29/07
to reca...@googlegroups.com
Hi,

On 9/29/07, cormanaz <cor...@crawdadtech.com> wrote:

Right.  I guess my question is:  How are these moderation requests
even getting through to me when they should not be submitted unless
someone responds correctly to the reCAPTCHA challenge?  I just tried
submitting a comment with the wrong words.  It kicked me back to the
comment form and there is nothing in the moderation queue.  Sorry if
I'm being thick-skulled about this...

When you submit a comment to wordpress and get the CAPTCHA incorrect, we mark it as spam. Then we redirect you back to the comment form. When we redirect you, we get the comment content from the database and then delete it in order to prevent the multiple comments in a short period flag from kicking in. However, some automated bots don't follow the redirects so they can get stuck in the moderation queue.

This is all by design. Just turn off moderation emails and you'll never notice it.

Brashquido

unread,
Oct 2, 2007, 6:24:01 PM10/2/07
to reCAPTCHA
I am getting the exact same problem as cormanaz, but am using the
plugin for Drupal 4.7. Until last week I had been using another
captcha module for Drupal, but decided to change as reCaptcha is a
little more user friendly and more polished looking than what I was
using. Within hours of me switching over I started seeing spam
messages appear in my moderation queue. I upgraded to the latest
Drupal plugin as directed in this thread;

http://drupal.org/node/179684

However, the spam still continues.

Is this redirection issue the same with Drupal as it is with
Wordpress? I really do not want to have to disable my moderation queue
just so bots aren't able to successfully post spam into my comments
system. Very occasionally you do get humans who post comments that are
not welcome on your site as well, which is why I like to review all
comments prior to them being published.

reCAPTCHA Support

unread,
Oct 2, 2007, 6:33:00 PM10/2/07
to reca...@googlegroups.com
What's the URL of your site?

cormanaz

unread,
Oct 2, 2007, 7:05:38 PM10/2/07
to reCAPTCHA
OK that clears it up, thanks. I have the "authorize on first post"
feature set, so I can't really turn off moderation completely. I will
just put up with it.

cormanaz

unread,
Oct 2, 2007, 7:05:38 PM10/2/07
to reCAPTCHA
OK that clears it up, thanks. I have the "authorize on first post"
feature set, so I can't really turn off moderation completely. I will
just put up with it.

On Sep 29, 1:50 pm, "reCAPTCHA Support" <supp...@recaptcha.net> wrote:

Brashquido

unread,
Oct 3, 2007, 5:07:18 AM10/3/07
to reCAPTCHA
www.iis-aid.com

I got more spam from the same IP today. I should mention that I tested
posting comments anonymously with correct captcha and incorrect
captcha. Seems to all work fine, with comments with incorrect captcha
being redirected to the comment form and comments with the correct
captcha being submitted to the moderation queue.

On Oct 2, 11:33 pm, "reCAPTCHA Support" <supp...@recaptcha.net> wrote:
> What's the URL of your site?
>

reCAPTCHA Support

unread,
Oct 3, 2007, 9:42:09 AM10/3/07
to reca...@googlegroups.com
Hi,

If you know PHP, you could probably modify wordpress such that it won't send moderation emails if the item is marked "spam".

Reply all
Reply to author
Forward
0 new messages