# WordPress Comment Spam

**URL:** https://meta.discourse.org/t/wordpress-comment-spam/291442
**Category:** WordPress
**Created:** [January 12, 2024, 3:49pm UTC](https://meta.discourse.org/t/wordpress-comment-spam/291442 "2024-01-12T15:49:26Z")
**Posts on this page:** 1
**Showing post:** 4

<div class="post-metadata">

### Author: ![angus](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/angus/32/341715_2.png) [@angus](https://meta.discourse.org/u/angus)
#### Post date: [January 15, 2024, 2:15pm UTC](https://meta.discourse.org/t/wordpress-comment-spam/291442/4 "2024-01-15T14:15:15Z")

</div>

Hey @jordantrizz thanks for your patience. I wanted to review this again in light of changes made last year.

After reviewing this again, this is in fact a desired aspect of the [WP Discourse](https://github.com/discourse/wp-discourse) system, to allow for flexibility in how folks manage native Wordpress and [WP Discourse](https://github.com/discourse/wp-discourse) comments (e.g. some people use both at once).

To administer Wordpress comments, including the use of `/wp-comments-post.php`, please use the native Wordpress settings in Settings \> Discussion e.g. “Allow people to submit comments on new posts”.

For further context on this see for example

> [@Oddity: A Wordpress comment was posted while using WP Discourse](https://meta.discourse.org/t/oddity-a-wordpress-comment-was-posted-while-using-wp-discourse/254045):
>
> I ran into an oddity this morning. I’m running Wordpress and using WP Discourse for comments. Despite having this setting enabled, I had three spam comments in my WP dashboard. How is a spam bot or anyone able to post a comment on Wordpress when comments are handled with WP Discourse? There’s no place to even enter data to be accepted as a comment? Much less for it to land in my dashboard. I’m bewildered. P.S. Within Wordpress I did just go set:

---

_[View the full topic](https://meta.discourse.org/t/wordpress-comment-spam/291442)._