BuddyPress

Is there any way to enable captcha or something similar on BP private messaging?

That’s where I’m seeing more and more abuse lately. Somehow sploggers register with my site, then PM all the users with kiddie porn links. It’s really bad.

I don’t quite have a handle on how they’re doing this. There must be some sort of evil script that goes through the member directory and messages member after member. Have other people seen this, and, if so, any suggestions on how to combat it?

I’m not aware of any captcha plugins for this, but it’s a good idea. I haven’t time to look into the code atm.

I don’t know if you’ve found a treatment, for this, but I’d suggest a plugin named HashCash from Donncha:

http://wpmu.org/wp-hashcash-for-wpmu/

Message spam is getting out of hand.

Yeah I just got two spam private messages in the last two days. Here is the latest one:

Please reply back with my email (anabel . awaza 01 @ yahoo . co . uk)
Dearest,
How are you over there?
I know that you would be excited for the fact that you do not know who is writing.
Actually my name is Mis. Anabel Awaza,Please my dear i will like us to hold a good long time relationship with real love.and I have something very important that I need to share with you. I am very serious; I shall tell you more about myself and send you my picture in my next mail.please reply back with my email address (anabel . awaza 01 @ yahoo . co . uk))
Hoping to hear from you soonest.
Yours Anabel.

View Spammer’s BuddyPress profile:

http://buddypress.org/community/members/anabel4you/

I’m getting these on my own site. These are spam bots and they found a way into BP. This should be a number one priority for BP. I’ve seen this stuff with phpbb and other CMS. It very easy for these people to bring down your site.

Got my second spam message as well. It seems to be affecting multiple BP installs so I think it should be a high priority to do something about it.

Try this until a more, full-featured privacy component is available.

Remove send private message button for non-friends:

http://blog.etiviti.com/2010/03/buddypress-hack-remove-send-private-message-for-non-friends/

Thanks for the link. I’m going to try that if my current changes don’t work. I changed the register slug and added more required fields to the signup page. I’ll let you know if it works.

PS
Looking at that code it seems it still let admins send PMs. If that’s true could it also be changed to allow other “ranks” such as authors, subscribers, etc.?

Even more spam now, coming from this user: http://buddypress.org/community/members/joymab/