[ad_1]
[ad_2]
My site doesn't have comments turned on, but I have gotten some comments anyway (they are all spam). Since there is no field / submission area at the bottom of my site where anyone could be inputting a comment (I have checked on both desktop and mobile), how would this be happening?
Fortunately, I have to "moderate" each comment, the comments don't appear on my site (thankfully) — I just get a notification of the comment and then I see it in my Control Panel.
I just can't figure out how someone would be able to post a comment when there is no field for it and I don't have them turned "on"!
Halp!
I remember googling that and finding a small snippet of PHP that I added to a file that prevents this – because turning off comments is not enough.
What some spammers do is they send their comments directly to the part of WordPress that processes comments, and so they don’t even go via the front-end of the website. It’s all done by bots.
I’ve prevented comments by not only turning off discussion, but also requiring commenters to be logged in — but there’s no way for them to register, so they can’t log in.
Settings > Discussion > Users must be registered and logged in to comment
In WordPress discussion settings, there is option to disable comments globally.
But this settings only applicable to new posts. So in old posts, you have to disable comments individually or using bulk actions.