Year in Cats-3606 by Tom Royal on Flickr
Year in Cats-3407 by Tom Royal on Flickr
Year in Cats-3207 by Tom Royal on Flickr
Year in Cats-3125 by Tom Royal on Flickr
Year in Cats-3045 by Tom Royal on Flickr
Year in Cats-2790 by Tom Royal on Flickr
Year in Cats-2600 by Tom Royal on Flickr
Year in Cats-2500 by Tom Royal on Flickr
Year in Cats-2494 by Tom Royal on Flickr
Year in Cats-2249 by Tom Royal on Flickr

You're using a very old version of Internet Explorer which can't show the photos that should be in this box. Please consider upgrading to a newer version of IE or an alternative such as Firefox. Thanks.

Stop WordPress Registration Spam

April 9th, 2012

My Custom WordPress Captcha

Since I'm thinking about all things WordPress, I've updated my Custom Captcha for WordPress into a proper plugin called Stop Registration Spam.

The idea is the same as before: to prevent automated registrations, and the spam that comes with them, by posing a question that will be simple for your visitors to answer, but impossible for a robot.

It now includes proper configuration via an options page in the WordPress Settings menu, where you can enter a unique question, answer and error message without altering the code.

You can download the plugin from the WordPress Plugin Directory, here.

Block WordPress Registration Spam with a Custom Captcha

January 30th, 2012

My Custom WordPress Captcha

The WordPress platform is a great way to run a blog or website, but it is under constant attack from spammers. Even if you prevent anonymous commenting, require user registration and implement the WP-reCAPTCHA plugin, you might find yourself – as I did – receiving dozens of automated, spammy registrations per day. However they're getting past the CAPTCHA – maybe it's OCR, maybe a proxied attack where humans are used – this spam clogs up your inbox and user list, and can be a pain.

I don't think it's possible to make your website completely spam-registration proof, but anything that makes your blog's security one step harder to crack should limit the number of spammers who successfully target it. So here's my solution: a custom captcha plugin for WordPress, as shown above.

My plugin adds one simple text question to the standard registration form. This can then be customised to match the content of the site, so that the answer is easy for any real human reader but, hopefully, too much work for any old random spammer or script. It's a quick-and-dirty job, so has no options pages etc – you simply adjust three lines of code to choose your own question and answer.

Your blog won't (ever) be safe from determined, human spammers who want to register, but this should cut down on automated registrations – it cut mine from about twenty a day to none.

UPDATE: I've updated the plugin, adding a proper options menu to make installation easy. You can get it here.