Trackback spam on WordPress

Quick fix for trackback spam on WP. Rename your wp-trackback.php to something like wp-trackback.php.txt so they can’t find it, and so it won’t run even if they do.

I’m testing some more complex fixes/blocks so I’d really appreciate getting trackbacks for testing, especially from people using blog software other than WordPress. Mail me: 3rdhand at this site (you can figure it out) if your trackback doesn’t get through. Thanks much!

[update] Outside the Beltway, also being hit, has a link to a very interesting interview.

PS… I’m doing trackbacks to a few others who have been hit… that I’ve been helping out. You guys can delete this. I’m just doing it to be sure I haven’t killed your trackbacks or anything.

[update again] Seems MT blogs have also been getting hit.

[last update, I hope] IF you understand htaccess redirects, there is a zip file here that has some tricks that should help, along with explanations. If you do NOT understand htaccess redirects, please ask someone who does know to help. If you are one of my bloghouse clients, or an ex-client with another host who has lazily left me with access, I may have already updated your htaccess file. And I will be trying to get to everyone I can. If you are using front page, I have no idea how to do anything with htaccess without blowing up FP. I’m told it’s possible but I don’t know how to do it.

If you can’t handle zip files for some reason, mail me and I’ll send it to you in text. (Trying to keep bots and spiders away from it, even though the info is available elsewhere, the longer it takes them to find out what is going on, the longer it takes them to find another way to get through. )

Update, WP users who don’t understand htacess or can’t use it because of your host, check the spampop plugin at Candy Genuis’ site. She also has modified Drupal’s comment module to do the same thing, Drupal users may want to ask for a copy of that module.

6 Trackbacks

  1. By Arguing with signposts... on 1 Feb, 2005 at 10:48

    trackback spam update
    It seems that the trackback spam this morning was a coordinated assault on a number of wordpress blogs (see Poliblog and Zygote Design, for example). Frustrating to me was that it seemed to come in waves. I received a wave of spam overnight, at around …

  2. By Dodgeblogium on 1 Feb, 2005 at 10:55

    Spammer bounty?
    If this site has been a wee bit unpredictable in the last few hours we apologise. It seems a bunch of d.o.s. terrorists (probably looking at over 1000 spam trackbacks on this site alone) seem to have taken into their head to take us down. Maybe we blog…

  3. By The Laughing Wolf on 1 Feb, 2005 at 12:13

    Okay, This Is New
    Just got notification of a trackback ping that is spam. Problem is, it is not showing up in the most recent pings nor can I find the post cited. Halp. LW Not the only one getting hit. Almost wish I…

  4. By PoliBlog: Politics is the Master Science on 1 Feb, 2005 at 13:13

    More on Trackback Spam
    James Joyner was hit as well as did Kathy Kinsely who also offers some advise on the subject.

  5. By Accidental Verbosity on 1 Feb, 2005 at 13:40

    More On Trackback Spam
    Kathy has a post on the wave of trackback spam on WordPress, which also struck Movable Type, and preliminary advice on handling it.  She's working on more elegant solutions, but her initial thinking is the type of thing I suspected would help…

  6. By The Liberty Cadre : Posting silence on 1 Feb, 2005 at 21:35

    [...] ng over the last day, alas we got got hammered at Dodgeblogium by a trackback spam attack. OTTH & Bloghouse (our hosts) got hammered as well; as a result access has been a wee b [...]