Comments on: WordPress hack: a way to stop the bots from registering

By: Mike Murray

Mike Murray — Wed, 24 Nov 2010 23:07:54 +0000

Raz – I’m running over 50 wordpress sites for myself and others. Generally I have found that Akismet catches 99.9% of SPAM. Can I ask how they are circumventing Akismet on your site? Or are you not running it?

By: Tacoma Seattle SEO & Web Design

Tacoma Seattle SEO & Web Design — Tue, 19 Oct 2010 00:49:08 +0000

Great article and awesome tips. I’m glad people still offer valuable information for free. It’s one of the things that keep people coming back!

By: Aşk Büyüleri

Aşk Büyüleri — Wed, 19 May 2010 15:17:16 +0000

Hi ..my names hakan .. Great work …. Thanks for your sharing…

By: Evden Eve Nakliyat

Evden Eve Nakliyat — Tue, 25 Aug 2009 00:03:37 +0000

Thanks for an elegant solution to a real problem….

By: Okey Oyna

Okey Oyna — Thu, 11 Jun 2009 21:40:12 +0000

Thank you very good for article

By: ataşehir evden eve nakliyat

ataşehir evden eve nakliyat — Tue, 09 Jun 2009 11:25:18 +0000

I really apriciate you about your working and sharing
Great work …. Thanks for your sharing.

By: alian

alian — Sat, 11 Apr 2009 20:10:16 +0000

hi h r u?

By: martin

martin — Mon, 30 Mar 2009 12:06:19 +0000

You may also download the plugin here . In my case there were no problems with installation.

By: ershad

ershad — Sun, 09 Nov 2008 18:11:40 +0000

thank you very much !!!
nice share

By: Prince

Prince — Mon, 05 May 2008 17:17:41 +0000

Hey Dear
Help me for hack Bank.

By: Kalina

Kalina — Mon, 21 Apr 2008 06:14:43 +0000

I hate the stupid little things too so I feel your pain, thank you for creating this captcha for WordPress!

By: qwe

qwe — Thu, 11 Oct 2007 12:01:15 +0000

this magnificent

http://raz-soft.com/wp-content/plugins/easy-ip2country/flags/sa.png

Where I can find it

By: qwe

qwe — Thu, 11 Oct 2007 11:57:24 +0000

good

but how i add that to mu 1.2.5 ?

i try it but i stop in

3. Search for â€œcase â€˜registerâ€™ :â€ and add the image check code:

i canâ€™t find it ?

help please ?

By: Raz

Raz — Tue, 04 Sep 2007 13:42:37 +0000

Get the plugin from here, more advanced and easy to use/install

By: Raz

Raz — Fri, 31 Aug 2007 06:54:20 +0000

Hi Richard,
I’m on my way with a wordpress plugin for this captcha, more advanced and easy to use. I will release it soon

By: Richard Silverstein

Richard Silverstein — Thu, 30 Aug 2007 19:15:09 +0000

I’ll recheck things. I know I have yr wp captcha file installed in the right directory & thought I’d installed yr version of WP login as well.

By: Raz

Raz — Thu, 30 Aug 2007 09:30:55 +0000

Hi Richard,
I don’t see the captcha quiz on your registration page, i think it should be there to work . I will update it if necessary I just need some time… Thanks

By: Richard Silverstein

Richard Silverstein — Thu, 30 Aug 2007 09:17:45 +0000

I have the wp captcha hack installed, but I’m still getting spam registrations (one ea. in the past two days). It’s still better than not having any protection. But it’s not shutting out all the bots. Perhaps you’d consider upgrading this to combat those bots who can get around the current captcha?

By: Raz

Raz — Thu, 19 Jul 2007 06:55:17 +0000

@Sean:You’re welcome
@Peter: I’m glad it helped. For donations see Donations page here, Thank you!
@Kruma: The math anti-spam protection can be broken you’re right here, but it will stop those lazy bots who can’t pass it . The smarter bots will have to get past my spam dog and trust me no spammer has bypass it ,yet! (the dog = Spam Karma 2 ). The captcha I’ve presented here is not so simple

By: Kruma

Kruma — Wed, 18 Jul 2007 22:19:22 +0000

This math anti spam protection can be broken very easy, trust me.
With a simple preg_match in php or explode you can have a blog spamer in couple of minutes for the math protection also simple captchas can be broken very easy. Scripts are getting smarter and smarter. It doesn’t matter if you rename the posting script, the bot will extract it directly from the page “wp-comments-post.php” . The best protection is to add an advanced captcha that sometimes you can’t give it right lol. But that won’t be too cool for your users.

By: Peter

Peter — Wed, 18 Jul 2007 16:38:20 +0000

Works great! Zero spammers registering on 10 WP sites.
Saved me LOTS of headache.
Where’s your PayPal link?

By: Sean

Sean — Sun, 08 Jul 2007 17:03:41 +0000

Thanks for an elegant solution to a real problem. Also, thanks for the detailed write-up and installation procedures.

By: Raz

Raz — Thu, 05 Jul 2007 06:48:26 +0000

Hi Will, working fine here so far, bots are not registering anymore and the registrants are receiving their mail as far as i know. The captcha approach will not stop maybe the smart bots who will manage to read the simple numbers/letters in the image challenge-response test but as you can see the characters generated in this captha are deformed in a way that a standard bitmap font letter shouldn’t be matched by a bot… if it will match then a change in the captha algorithm like a different font or deforming the characters more, adding extra colors lines etc will be another challenge for the bot…
Good luck! and let me know if this hack will work on you…

By: Will

Will — Wed, 04 Jul 2007 19:09:00 +0000

Has this been working for you? I know the spam protection questions, like the one in this comment form, work, but many in the WP forums say the captcha approach does not stop the bots.

Also, I see in your registration that you have the new user’s password sent to them rather than letting them choose their own. You don’t have the very common WP problem of new registrants not receiving their email with password? I had to modify my registration to allow users to manually choose their password. New users were not receiving their password emails and there is not yet any fix other than allowing users to choose.

I actually turned off registration on my site as the only way to stop the spam bots. I allow comments without registering. If someone really wants to register, they just contact me with their info and I do it manually. Works for now as my site is small and fairly new, but it would be a pain on a big, busy site!

By: Raz

Raz — Wed, 13 Jun 2007 12:50:25 +0000

Thanks for your corrections Peter.

By: Peter

Peter — Sat, 02 Jun 2007 21:41:19 +0000

Great, just what I needed. Thanks for sharing.

I made just two little corrections:

1. changed the tab index of added input field from 10 to 30, so changing focus between fields with tab works correctly

tabindex=”10″ -> tabindex=”30″

2. replaced br tag before cpatcha image with p tag, so we don’t have closing p tag without opening tag after captcha image and also the form now look pretty much the same both in firefox and IE.

By: Raz

Raz — Mon, 21 May 2007 20:30:40 +0000

@Pirahna: da, e si asta o metoda fast&clean

@Richard Silverstein
This is not a plugin, don’t install it like one. This is just a “hack”, a way to modify your wordpress files in order to include the captcha test when registering. I didn’t experienced your reported problems on my site. Cookies are accepted and working fine here, what wordpress version are you using? Your wp-login.php maybe different from mine so try the Step by step way, you just need to find the registration form (“registerform”).
Good luck!

By: Richard Silverstein

Richard Silverstein — Mon, 21 May 2007 19:01:29 +0000

One small issue bugs me a bit about the plugin & perhaps you might address it. Before installing it, I could open my blog in my browser & be automatically logged in. After installing, when I open my blog it doesn’t accept my cookies & won’t log me in unless I do so manually. Isn’t there a way that the plugin could allow people to login if they’re already registered & subscribed?

By: Pirahna

Pirahna — Sat, 28 Apr 2007 23:48:39 +0000

Well … cea mai buna metoda e sa dai rename la fisiere “

By: Raz

Raz — Mon, 02 Apr 2007 17:36:57 +0000

javi, just follow my steps and insert the captcha check in to your script, it’s not a big difference between mine and yours . Here is your modified file Let me know if it works I didn’t have time for a full test sorry. Don’t forget to upload wp-Captcha.php script in the same folder as the wp-login.php

By: javi

javi — Sun, 01 Apr 2007 18:28:36 +0000

i like very much this hack to wp-login.php but it hasnÂ´t captcha