Spammers attacking my WordPress Site – Removing URL field from core? [closed]

The decision about comment status upon posting is made by wp_allow_comment() function. There is a filter in it that can be used to change it accordingly. Basic form would look something like this (not tested): add_filter( ‘pre_comment_approved’, function( $approved, $commentdata ) { if ( ! empty( $commentdata[‘comment_author_url’] ) ) { return ‘spam’; } return $approved; … Read more

How is my non-published blog getting so much spam?

What are your privacy settings? Go to Dashboard -> Settings -> Privacy If it is set to I would like my site to be visible to everyone, including search engines (like Google, Bing, Technorati) and archivers, then your site is actively being crawled/indexed by search engines, and thus visible to spammers. If it is set … Read more

How to locate & delete hidden pages on a site

Posts/pages are stored in the wp_posts table. So you could get into the table and delete records. But, not recommended, unless you really know what you are doing with the tables. My procedure would be to re-install WP (from the Update page; reinstall WP), then delete any non-WP (the ‘Twenty*’ ones) themes, and remove all … Read more