[Joly MacFie]

I installed, at Steve’s suggestion, WordPress Firewall and it seems to do a good job of rejecting SQL injection exploits.

Recently I’ve had a couple of recaptcha related incidents, where it says “offending parameter is recaptcha_challenge_field =(long string)”.

Since the IP addresses are in China, I’m sure these are spam link comments, but I wonder exactly what is going on, and, since I rarely if ever get legit comments – if the combo of wordpress firewall and recaptcha is preventing same.

Anyone else using same combo care to comment?.

[Steve]

Joly– Not sure what Steve you’re referring to, but I never suggested WP Firewall. 😉

Two questions:
1) How do you know someone is trying SQL exploits?
2) If you don’t get any comments, why not just turn them off?

[Joly MacFie]

I’m sure it was you I heard mention it at a meetup. I”ll have to check the videotape!

Answers

1) because WP Firewall tells you when it blocks them.
2) because I would like to see comments, if any.

I am talking, in this case, http://isoc-ny.org

[Steve]

Disqus does a pretty good job of stopping comment spam. You may want to give it a shot.

To the videotape!
http://wpnyc.org/video/services-that-make-your-site-awesome/

[Author]

Posts