Since changing over to the new WordPress, I figured it would be sooner or later before I got some comment spam, even with some of the newer protections it offers. I have the site setup to send me an email anytime someone comments. Since I don’t get that many comments, it isn’t too hard to keep on top of them.
Today, I checked my email after work and saw that I got a comment spam. This one was different than the others. It only had one link, which was to some casino, the rest was some sort of bizarre jibberish comment. I deleted it, then went to bed (strange sleeping hours lately). When I woke up, I started working on some more robust comment protection.
The first thing I tried was a captcha, which is where a person has to type in a random code that appears in an image before being able to post. I couldn’t get it to work, so I had to try something else.
Now I am using WP-hashcash a/k/a Spam Stopgap Extreme. It is an actual plugin for WordPress instead of a hack. It presents some sort of javascript calculation in the HTML code for the browser to work on. If it comes up with the wrong answer, I guess the comment won’t work. There isn’t anything for the reader to do. It’s all done within the browser.
Hopefully this will be the key.