Introduction – WordPress Registration Spam
Welcome back to another one of RegistrationMagic tutorials. Today we’ll talk about how to secure against WordPress registration spam (grrr…). If you haven’t received any spam mail from your unprotected forms, consider yourself lucky. But sooner or later, spam will catch you. And there’s an air of finality about it. Want to know how spam can hurt you?
- Clog your inbox and bring down productivity to a crawl.
- Constantly trigger your autoresponder, and contribute in getting it blacklisted or choking server email queue.
- Swell up or even crash your site’s database
- Attempt a hack or code injection
- Take away your peace of mind!
And you wanna take none of it, if you’re serious about your site. So instead of counting on luck alone, you will need some pretty strong protection to secure registration form. Them bots are out there prowling the web. RegistrationMagic has set of built-in tools that allows you to secure registration form and boot spam like a boss!
WordPress Registration Spam Security Settings
Let’s open RegistrationMagic. Spam settings are inside Global Settings → Security
You will find multiple options within this settings panel. We recommend configuring it as soon as you make your first form live.
Google’s reCAPTCHA is your quintessential line of defence. It is so common around the web that users pretty much expect it to accompany any form. We keep our code up to date with newest reCAPTCHA versions so that your form keeps up with latest standards. But there are extra steps required to make it work. Once you enable reCAPTCHA you will need to generate the two keys for your domain. To do this, head on to this link Make sure you enter your domain name correctly using “http” or “https” – whichever applies to your case. Once you have the keys, paste them into Security panel.
Next, submission limit for a device blocks any specific device used to access your site when it tries to fill out the form more than a pre-set limit. Many spam attacks originates from a single device.
Banning an IP address is another important spam fighting tool. As you must be aware, RegistrationMagic is already equipped to capture IP address of the form submitter (See General Settings). If you start receiving bogus or empty submissions from a specific IP, paste it here. You can also block an IP range, if that’s what you are after. Once you hit save, no more spam from that IP.
Banning an Email address works similar to banning an IP. If the spam attack originates from multiple IPs but has specific email or email pattern, use this option to close the door. Wildcard is supported, therefore you can block a domain too. Just enter “*@domainname.com” to block submissions from any specific email domain.
So by combining all four options, you can fight any type of WordPress registration spam! All you have to be is little vigilant and configure the plugin properly. We’ll take care of the rest while you handle folks registering on your site. Good luck 😉
- How to add or update user profile fields using WordPress forms - August 5, 2020
- Boost RegistrationMagic User Profiles With ProfileGrid Integration - February 19, 2019
- WordPress Registration Shortcodes List - August 14, 2018
- Advance WordPress User Login Plugin Guide - August 8, 2018
- WordPress User Registration Status Guide - April 9, 2018
- Create Intelligent Contact Form in WordPress [Breakthrough Ideas] - February 8, 2018
- Setup payments on Registration form using Products [Payments Guide] - December 22, 2017
- Create Your First WordPress Registration Page – Starter Guide - November 14, 2017
- How to Add Custom Fields to WooCommerce Checkout Form - November 3, 2017
- Setup Early Bird Registration for an Event on WordPress Site, with Ease! - April 20, 2017