I have a wordpress / Buddypress site.... And am having serious issues with spam users signup....
Have tried using Akismet, but it is seemingly not helping matters.
Please who has a idea as to which plugin to use or if anyone has an idea on which other method to use, please share
When you use a form for users to register you can use a captcha like in all forms, e.g. I use really simple captcha in combination with contact form 7.
Using either captcha on your forms and/or a plugin can be useful.
Many of the forms wordpress plugins come with have captcha built in - or it can be added. Google also provides reCaptcha, and doing an internet search will bring up plenty of information on both.
Two plugins I've used in the past which I've found to work well are WangGuard and WordFence
Wangguard mainly as WangGuard cleans your database from sploggers, spam users and unwanted users.
Wordfence is good as it can Block entire malicious networks. Includes advanced IP and Domain WHOIS to report malicious IP's or networks and block entire networks using the firewall. Report security threats to network owner.
Ultimately remember people will always have their own opinions on security - but there are plenty of ways to improve your wordpress / buddypress security. Wordpress also has information on Hardening Wordpress against malicious attacks
Related
This question was asked in 2013, but the answer is out of date (plugin retired).
My question is:
We want to install WordPress multisite with blog1.site.com, blog2.site.com, etc., all having single sign on.
We need to make the transition between the sites seamless so they appear well-integrated as part of one domain.
How can I make the same user logged in one of my sites automatically logged in when visit any other site from network?
I am also searching for a solution to this problem. I also found many SSO outdated/unsupported plugins and do not want to install them for security reasons.
The closest solution I could find is from here
How do I share user logins and roles across the multisite network?
By default, a user who is registered on one site cannot register or be added to another site on the same network. That’s because they are already registered in the shared WordPress database. However, they don’t have any user role privileges on other sites.
You can use third-party plugins like WP Multisite User Sync to sync users across the network. However, you need to be careful as you may end up giving someone admin privileges to a site.
But I haven't tested it thoroughly enough yet to see if it satisfies everything I need and I'm not sure where to deal with the problem mentioned in the article of "you may end up giving someone admin privileges".
If anyone else has a solution closer to the WPMUDEV SSO plugin that would be very helpful. Thanks
More context: our work project is setting up a blog in which numerous contributors (25+) worldwide will be posting content. All resources suggest Wordpress.org over Wordpress.com.
Before we set this up, can anyone let me know how admin, editing, or contributor roles work with the software? Specifically, can people assigned to various roles contribute without accessing the site via the software, or does each contributor need to download it to have access?
I hope to learn more information prior to setting up this shared blog, which is why I have a blind eye to how this works. Without easy sharing access, I might suggest using Wordpress.com since it is managed in-browser.
wordpress is a cms for blogging with a lot of plugins and it`s best for your job that you describe. you can read more about role and capabilities in this page.
https://codex.wordpress.org/Roles_and_Capabilities
We are planning to create an asp.net website (probably mvc), that needs a cms for news items.
Our content managers and others who require to publish news have asked if they can use wordpress for content management.
Our users have different roles, and news items should be visible to certain roles, or even specific users if possible.
The reason they want wordpress is the manager's user friendliness, so if some other alternative with the same kind of user experience would be ok.
Could anyone please point me in some direction?
NOTE: I'm still doing research at the moment, so I've got nothing holding me back at this point.
There is an API plugin that has been developed to spit out information in JSON, but I have not actually implemented a site with it:
http://wordpress.org/extend/plugins/json-api/
Perhaps you could have the authors work on a wordpress install and create your app to draw content via that plugin?
I too was facing the same issue, little different. We want to have WP as CMS so that our site can take the benefit of SEO which is very easy with WP. SO we installed WP under a folder in the Main ASP.net based website. Initially there were issues, I was unable to run it. Finally managed to run it. Solution is posted here - http://www.wwwlabz.com/how-to-run-a-php-based-website-from-a-subfolder-in-asp-net-website. Hope it will help someone. Actual site where we implemented this is http://www.periproperties.com/content/.
Now I want to have specific section of WP to be accessible on my site. SO I am exploring different options and will post, if found something
Thanks.
DotNetNuke is the most popular ASP.NET based CMS (source). I am implementing my first project in it and so far I am very happy with it.
Note the free edition will not work for you since you need customizable security roles and free has a limited set of predetermined roles. You'll need the pro edition.
I don't know how similar it is to WordPress. Overall, WordPress is much more popular but of course there are platform issues with WordPress since it is Apache based and you want to create an ASP.NET website.
I have a website that I want to setup so that users can register for the site but the administrator of the site will have the final say on whether or not they can be a member of the site or not.
I am running Wordpress 3.0.1 and Buddypress 1.2.5, buddypress is used to register the user, so I assume it will need to be a buddypress plugin that is used to allow or deny the user. I have searched and searched and cannot come up with any plugin that replicates this functionality. Are there any out there, or anything that gives a similar experience?
Many Thanks To Anyone That Helps,
sea_1987
Here is a BP component for Allow / Deny User:
http://webdevstudios.com/support/wordpress-plugins/buddypress-registration-options/
The description:
A WordPress BuddyPress plugin that allows for new member moderation, if moderation is turned on from the admin settings page, any new members will be blocked from interacting with any buddypress elements (except editing their own profile and uploading their avatar) and will not be listed in any directory until an administrator approves or denies their account.
I have just completed a thorough research exercise on this, with the same requirement in mind. The sad truth of the matter is that most of the plugins that supposedly give you this functionality do not work fully and properly. I tried a number of plugins including:
Buddypress Registration Options
Absolute Privacy
Angsuman’s Authenticated WordPress Plugin
BuddyPress Private Community
All of these failed to give me bulletproof security. They largely seemed to block standard WordPress pages, but didn't block public access to the Activity, Members, Groups and other sections. Other issues were simply getting it to work with WP 3.0.1. I found I had to dig into the plugin code and hack it to get a decent result.
Finally, I settled on a plugin called "registered-users-only-2". This totally blocks users who are not registered. However, it doesn't give you moderation functionality.
I hope this helps your quest.
Is there any SEO disadvantage in using a subdomain to host a blog on Wordpress or Blogger? I don't want to go to the trouble of creating a blog module for my site - I'd rather just set up a CNAME entry and point a subdomain to a free Wordpress or Blogger account. Will Google punish me for doing this by claiming that I have "duplicate content" - i.e. the intro text for each blog entry will be on my main site and the full details will be visible on Wordpress/Blogger? Is it better to incorporate the blog functionality into my main site? Are there any other potential disadvantages to this subdomain/external hosting approach using a free blog host?
There are a lot of advantages to self-hosting your blog.
You can do whatever you want with your own self-hosted blog. On Wordpress you could get banned and lose all of your content.
You can host ads or and do other commercial stuff not possible on Wordpress. (The free wordpress blog doesn't allow any advertisements other than their own ads).
Better ranking opportunity in search engines by using your own top-level domain.
You can modify your functionality at will.
It looks more professional and gives you bragging rights.
On Wordpress you may run up against bandwidth restrictions if your blog gets really popular - you won't be able to do anything about it.
Willem Obst answer makes some excellent points, but two serious accusations that are not correct. I know these are incorrect because I am part of the WordPress.com team.
Num 1. If there is a ToS issue, we work with our customers to resolve the issue. In the rare case, where a blog is suspended, the customer is still assisted with exporting their content.
Num 6.We have no bandwidth limits and never have.
Many companies use free WordPress.com for their blog. Here are some examples
http://wordpress.org/showcase/flavor/wordpresscom/
WordPress.com is also is a blogging community which gives you access to a large audience and the community features like the global tag pages.
It's a great way to get a blog going, and there is no lock in. Here is an example of a blog by some friends that started on WordPress.com and since moved to host it themselves to gain the additional flexibility Willem describes so well:
http://blog.bootuplabs.com/
Finally to the original question. It's a mixed bag.
The nay sayers to using a subdomain will focus on Google and other search engines generally treating the subdomain as it's own domain with it's own authority.
The pro subdomainers will focus on it being another opportunity for a result in Google and the search engines. As is the case for the "bootup labs" example. (Although, Google's Matt Cutts over a year ago promised this was changing.)
Unrelated to SEO, many teams use a subdomain or separate domain all together for web security reasons. You may notice that http://blog.flickr.net/ is on flickr.net instead of flickr.com primarily -- I understand -- for this reason.
No in one word
Actually a good idea. Self hosted blogs tend to have a lot integrated into them e.g autopinging
In answer to the question.... NO.
The question you asked is also a little ambiguous. Are you wanting to host your own blog ie run it on your own server under a subdomain, or are you wanting to add a CNAME entry that links to your blog.
There are benefits to both:
Running your own - Advantages:
You can control every aspect of it
You can change the design/layout as much as your coding ability can handle
If you have a fast server, your blog will be served to viewers extremely well
You can advertise on your own blog - Google Adwords/Adsense etc...
You can setup advanced analysis of traffic and see every little detail about everyone who visits your blog
You can tweak the SEO of your blog to the 'n'th degree
Running your own - Disdvantages:
Hosting a blog (especially a popular one) requires a pretty powerful web server
You have to maintain the blog and security of the blog eg. users and permissions
Dedicated Server hosting can be expensive
Hosting blogs use a lot of bandwidth
Using a third party blog - Advantages:
Generally free
No strain on your server/bandwidth
Security and permissions management is limited but managed by the host
Generally hosted blogs have an extremely user-friendly GUI
Using a third party blog - Disvantages:
Sometimes include advertising that benefits the host not your company/blog
Very limited ability to customise/edit the design of the blog
Limited control over the security and user management
Other hosts can choose to stop offering a blog hosting service
In regards to SEO and blogs:
Your blog is not going to suffer or be penalised by GOogle/Yahoo/Other search engines if you use a CNAME redirection to another host.
You will not get penalised by a search engine for duplicate content if the content is not completely duplicated on, for example if your main domain uses the title and summary of what is on your blog hosted on the subdomain.
If you adhere to the main SEO principles there is no reason why your blog would suffer on a subdomain:
Using relevant addressing methods eg. yourblog.yourdomain.com/title-of-blog-article.html
Use W3C compliant/correct XHTML/HTML/CSS code
Use appropriate and relevant META data (keywords, descriptions, titles) for the blog and the articles.
Relative linking instead of absolute linking
Hope this helped. If you have any other questions feel free to ask