I have a lot of spam messages in my comments of K2 these days (about 60 a day). reCAPTCHA is turned on...

 

Does anybody know if there is a beter/other way to project K2 from spam in it's comments system.

We counted 3600 lines of comments in the DB this morning of one of our clients. This is a very necessary solution and I too would appreciate any help or suggestions.

I had the same issues with reCaptcha on my other blogs, not to mention usability issues, so we switched to Nucaptcha and so far so good.....crossing my fingers.

@ron Did you do the integration or did you find a plugin? Can you elaborate on your methods?

Same problem.

 

There is a plugin thought to be an engine for other developers: ideal.fok.com.br/joomla-extensions/free-extensions/plugin-mu...

 

I checked some implementation: Basically there needs to be a parameter to check if turned on and a trigger for the plugin in k2 comments. I am not advanced enough in PHP to quickly implement it, so if anybody is better and posts some guidance, I will welcome it since I do not want to install Discuss on all sites, specially if small with few comments.

I had this happening for days, clearing out 20-30 spam comments every 24 hours. I finally just had to require login for comments, which I really didn't want to do. Since making that move, the spamming has stopped, but so has my comment traffic.

Use Jcomments for K2 commenting ?

Just install plugin for K2. You have option to import old K2 comments to Jcomments tables.

 

Jcomments use captcha that generates image with letters randomly from one list of alphabet and symbols. You can even chose your own in the list.

 

 Very difficult for automatised script to break this captcha. For humans there is no help, beside registration.

 

So long i haven´t had single script spam in K2.

At the time that I was getting hit, this Google search query was in my referer logs:

 

"2011-07-04_14-17-22" -"enter the two words you see below"

 

Which, when searched in Google, turns up a whole bunch of K2 based sites. So, it seems as though somebody determined a flaw in K2, set up a bot to comment on each site it could find to leave the 2011-07-04_14-17-22 string in the comments, and then returned to take advantage of the vulnerable site.

 

In the search results, you'll also see what I'm guessing are the reCAPTCHA public and private keys for each site.

Is there a solution for this spamming problem?

The bug I put in has been updated to say the reCAPTCHA library for K2 has been updated to v1.11. So it looks like that's the solution.

 

code.google.com/p/joomlaworks/issues/detail?id=111
Harrie said:

Is there a solution for this spamming problem?