Hello, When using the WP Discourse plugin, the endpoint /wp-comments-post.php is still active and can be used to post WordPress comments via POST by mostly bot traffic to spam comments. Did I miss a setting in the plugin to disable this? EDIT: For the time being I’ve done the following to stop these requests. <?php function disable_wp_comments_post() { if (basename($_SERVER['PHP_SELF']) === 'wp-comments-post.php') { status_header(403); die(); } } add_action('init', 'disable_wp_comments_post');

Hey @jordantrizz, could I just confirm you have Discourse comments enabled (i.e. “Enable Discourse Comments” in the “Commenting” section of the WP Discourse admin is checked)?

Hey @jordantrizz thanks for your patience. I wanted to review this again in light of changes made last year. After reviewing this again, this is in fact a desired aspect of the WP Discourse system, to allow for flexibility in how folks manage native Wordpress and WP Discourse comments (e.g. some people use both at once). To administer Wordpress comments, including the use of /wp-comments-post.php, please use the native Wordpress settings in Settings > Discussion e.g. “Allow people to submit comments on new posts”. For further context on this see for example [תמונה] Oddity: A Wordpress comment was posted while using WP Discourse WordPress I ran into an oddity this morning. I’m running Wordpress and using WP Discourse for comments. Despite having this setting enabled, [Screen Shot 2023-02-04 at 5.53.00 AM] I had three spam comments in my WP dashboard. How is a spam bot or anyone able to post a comment on Wordpress when comments are handled with WP Discourse? There’s no place to even enter data to be accepted as a comment? Much less for it to land in my dashboard. I’m bewildered. P.S. Within Wordpress I did just go set: [S…

Thanks, and perhaps this should be documented somewhere because I was under the assumption if you shutdown the WordPress comments that the Discourse widget will not be displayed.

WordPress ספאם להערות

תמיכה WordPress

jordantrizz (jordantrizz) 12 בינואר,‏ 2024,‏ 7:00pm 3

Yes, I do have this checked.

נושא		תגובות	צפיות
Oddity: A Wordpress comment was posted while using WP Discourse WordPress	4	549	4 בפברואר,‏ 2023
Why enable wordpress post comments? WordPress	17	2743	19 באוקטובר,‏ 2018
Configure WP Discourse to display comments from Discourse Administrators wordpress , video , how-to	10	3819	25 ביוני,‏ 2025
Is it possible to post a new comment from WP to Discourse? WordPress	2	1034	2 במאי,‏ 2020
Comments made in WordPress Mobile app circumvents Discourse WordPress	2	837	3 באוקטובר,‏ 2019

WordPress ספאם להערות

נושאים קשורים