I started getting comment spam at wedin.org over Thanksgiving, and since then every WordPress site I’m involved with has gotten at least some. It’s relatively easy to delete the spam, but that’s clearly not a real solution. Turning off comments would obviously fix it, but a blog isn’t very fun without comments. I’ve listed below a few sites with information and tools that I’ve found helpful.
This site has a nice overview of the problem, and many (all?) of the various available methods of fighting it.
Spam Karma seems to be highly recommended, and it uses tons of different methods of detecting spam. However, I’ve found it tends to eat real comments, which sucks. It’s highly adjustable though, so it may just be a matter of checking the right boxes.
This post at the WordPress support forum suggests renaming a couple of comment-related files to confuse the spam bots.
This WordPress plugin is very simple, and shouldn’t affect real users at all. Seems like spammers will find a workaround pretty easily though.
So far, there’s no method that’s perfect. Spam Karma works very well, but deletes real comments occasionally. The last two methods seem to work, but are so simple that I’m afraid spammers will be able to program a way around them too easily.
