# Dealing with unwanted (and probably spam) accounts via SSO?

**URL:** <https://meta.discourse.org/t/dealing-with-unwanted-and-probably-spam-accounts-via-sso/24050>\
**Category:** Feature\
**Tags:** sso, wordpress, discourseconnect\
**Created:** [15 Gennaio 2015, 7:47pm UTC](https://meta.discourse.org/t/dealing-with-unwanted-and-probably-spam-accounts-via-sso/24050 "2015-01-15T19:47:52Z")\
**Posts on this page:** 1\
**Showing post:** 32

<div class="post-metadata">

**Author:** ![CharlesWil](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/charleswil/32/36694_2.png) [@CharlesWil](https://meta.discourse.org/u/CharlesWil)\
**Post date:** [18 Gennaio 2015, 2:11pm UTC](https://meta.discourse.org/t/dealing-with-unwanted-and-probably-spam-accounts-via-sso/24050/32 "2015-01-18T14:11:57Z")

</div>

There’s a good word press plugin that spots spam bots behaviour.  
It would make a helpful feature for discourse.

> This plugin adds a stylesheet or image to your blog’s html source code. When a browser loads that stylesheet or image a cookie is dropped. If that user then leaves a comment the cookie is checked. If it doesn’t exist the comment is marked as spam. The plugin can also check how long it took a user to enter a comment. If it’s too fast it’s probably a spam bot. How fast can a legitimate user enter their name, email, web address and enter a well thought out comment?

> For the adventurous, add these lines to your .htaccess and it will block spam attempts before they ever get to WordPress. Replace the Xs with the cookie that was set in your browser after viewing your blog. You can also find the cookie value by examining the page source code and looking for “css.php?k=XXXXXXXXXXXXXXXXXXX”. Make sure the lines go above the standard WordPress rules.

Because I guess all spam bots paste the whole email address and password  
in instantly into the text fields which, would be faster than normal user behaviour

If a login could detect the speed of which user sign up or how many characters a user enters in the text field at once. this feature might reduce spam

> **[Cookies for Comments](https://wordpress.org/plugins/cookies-for-comments/)**
>
> Sets a cookie on a random URL that is then checked when a comment is posted. If the cookie is missing the comment is marked as spam.

I hope that’s a helpful idea! 😊

---

_[View the full topic](https://meta.discourse.org/t/dealing-with-unwanted-and-probably-spam-accounts-via-sso/24050)._