Wordpress - how to reduce the number of spam comments

For my blog, I too run Akismet to catch any spam that is posted to my blog, but I also prevent spam from being posted in the first place using a few plugins:

  1. Cookies For Comments requires that people leaving comments have cookies and CSS stylesheets enabled. A stylesheet is added to your site that when loaded sets a cookie. This cookie is then looked for when a comment is left. No cookie? The comment is rejected.

    This is effective because most spam bots do not load stylesheets or accept cookies. Note this will not prevent spam left by humans (it'll be Akismet's job to catch that).

  2. Disable Trackbacks does exactly what it says it does. When you receive spam pings (links from other blogs), most often those are in the form of the deprecated trackback instead of the better and more modern pingback. Trackbacks, when used normally, require the person sending the trackback to enter a special URL from your blog into their blog. Trackbacks are pretty much never used legitimately anymore, so you can safely disable them and avoid lots and lots of ping spam. Akismet will take care of any pingback spam (it happens, but not nearly as much).

With those two plugins installed along side Akismet, I only get a few spams and very rarely do any of them actually make it onto my blog.

Hope that helps.


Most of the spam I get is via the contact form, always using a gmail address. I take the time to report every single one of them to Google. I figure since they are trying to use that gmail address then the sooner I help get it taken down, the less ROI they will get on that method and they will simply stop trying.

Akismet has been very good at filtering out comment spam. Captcha is a big PITA and having to register to leave comments is a strong comment-deterrent but the easy maths question or a css hidden field are 2 options you could try.


To actually reduce spam, I'd suggest installing a Captcha plug-in. Really, though, if the spam is being caught by Akismet already, there's not much of a need to add another filter. It just adds an 'are you human?' verification step before double checking by passing the actual comment through Akismet.

Using both systems in concert will block most automated spam (i.e. bots) and filter out any "your blog is kewl! buy a rolex" junk that somehow makes it through.

Tags:

Comments

Spam