"Members must be logged in to comment" feature not working, spam bot comments

[rvlawrence]

I have the setting checked for “members must be logged in to comment” in WP Emember and am getting spam comments coming through from bots, even though the comment form is not physically showing. Somehow they are bypassing the warning box to the comment form “underneath”.

I also have the settings in WordPress “Users must be registered and logged in to comment” and “An administrator must always approve the comment” and they are checked.

The spambot leaves a comment anyway. And it gets held for moderation.

Somehow the spambot is getting through to the form (even though it shows as being protected and the warning box is there). It’s as if the comment form is hidden “underneath” the warning and only the spambot can see it.

I am using the latest version of both WordPress and Emember.

Anyone else having an issue with this?

[admin]

This is more of a WordPress thing. Basically, the comment spam bot it posting data directly to “comments.php” file of your site. This is why that WordPress settings isn’t working either. WordPress’s answer to prevent this is the following:

http://codex.wordpress.org/Combating_Comment_Spam/Denying_Access#Deny_Access_to_No_Referrer_Requests

[Author]

Posts