40% OFF EVERYTHING
BLACK FRIDAY SALE
Buy Now

Security

This topic contains 10 replies, has 3 voices, and was last updated by  Patrik 4 years, 9 months ago.

We have moved to a support ticketing system and our forums are now closed.

Open Support Ticket
  • Author
    Posts
  • January 28, 2020 at 2:51 am #6833

    Jeff Adams
    Buyer
    Post count: 1780

    I started using Wordfence because I wanted to stop fake new users. I was getting a lot of them and I can always tell they’re fake because they use two capital letters for the required field “Vegan Story” when setting up a user, looks something like this “TJ”. So, I thought maybe blocking their IP Addresses would eventually slow it down.

    I noticed when Wordfence was active that Geodirectory developers were not able to login when they needed to. So, I disabled it until they were able to finish. Then I received a scheduled report from Wordfence and it showed “Failed Logins” and GD was one of them. I felt like there was a chance some of other users may have been blocked somehow like GD was. So, I need to find another solution.

    What is a good solution to stop fake users from joining for VeganLinked.com. And maybe the same solution for stopping the fake/spam comments? And something that wont prevent real users from doing what they need to do, that works good with GD/UsersWP.

    January 28, 2020 at 1:33 pm #6840

    Guust
    Moderator
    Post count: 29970

    Using a reCaptcha will stop the bots, but you never can stop desperate people.
    https://userswp.io/downloads/recaptcha/

    Only allow comments from registered users is another option.

    For manual control of new users: https://userswp.io/downloads/moderation/

    Thanks

    January 29, 2020 at 6:27 am #6850

    Jeff Adams
    Buyer
    Post count: 1780

    Thanks Guust, but reCaptcha doesn’t appear to have an option for comments. Where do I make comments have reCaptcha?

    January 29, 2020 at 6:35 am #6851

    Guust
    Moderator
    Post count: 29970

    You can use the GD recaptcha plugin for WP Comments (includes GD reviews)
    https://wpgeodirectory.com/downloads/gd-recaptcha/

    Thanks

    February 2, 2020 at 2:00 am #6900

    Jeff Adams
    Buyer
    Post count: 1780

    Lol, I removed the GD one a while back because there was a conflict between the two I though. So, are you telling me I can use both of them?

    February 2, 2020 at 10:11 am #6902

    Guust
    Moderator
    Post count: 29970

    Yes, you can use both of them.
    Just do not use them for the same option.

    February 16, 2020 at 7:37 pm #7185

    Jeff Adams
    Buyer
    Post count: 1780

    I’m still having a horrible time with fake users joining. A handful every day or two and they always have two capitol letters in the “My Vegan Story” required field. I have recaptch installed. I reached out to my hosting provider to see if they could help and they said

    “I have checked the register page and recaptcha is already enabled which usually helps to reduce bot attacks. I think your web developer is in a better position to assist you with this, may be give users an option to enter their mail/phone number first and add some verification process like OTP before giving the sign up link with some session variables in the url at the end and direct link like https://veganlinked.com/register/ don’t work. Please let us know if we can be of further assistance.”

    This is all way over my head. Is this something you can help me with in any way?

    February 17, 2020 at 7:09 am #7190

    Guust
    Moderator
    Post count: 29970

    Change your registration settings to email activation required.
    Then you can delete those ones that never activated their account on a regular basis.
    If you use auto-approve and auto-login, you are allowing registrations to be completed for non-existing email addresses.

    Thanks

    February 17, 2020 at 4:27 pm #7195

    Jeff Adams
    Buyer
    Post count: 1780

    cool, that may be a good idea. I just have it currently setup so that after they register they are brought to the add listing page. Could it be set it up so that after they activate they are brought to the add listing page? I wish they didn’t have to go through that extra step but if that’s the only way I guess that’s what I’m going to have to do.

    Another question I have is, is there a way to make it so they have to enter more than just two characters for the required text field? That may stop it.

    February 18, 2020 at 4:26 am #7199

    Guust
    Moderator
    Post count: 29970

    You can set the login direct to the Add Listing page if you like.
    After activation, they will need to log in anyway.

    Another question I have is, is there a way to make it so they have to enter more than just two characters for the required text field? That may stop it.

    I’ll get the developer to look at that question for you.

    Thanks

    February 18, 2020 at 7:25 am #7201

    Patrik
    Moderator
    Post count: 1971

    Hi,

    There are no such options as we focus on the general purpose of the plugin and for your specific site, you can take the help of Javascript to add further validations.

    Regards,
    Patrik

  • Author
    Posts
Viewing 11 posts - 1 through 11 (of 11 total)

We have moved to a support ticketing system and our forums are now closed.

Open Support Ticket