Spam accounts getting past registration

 

Good to know. I thought about the space and was going to test it and see if that would work as an answer to the questions.  Couldn't there be a validation question like whats 2+2 and have it check that the user enters 4? Ideally, the admin could make up a random list of say three questions and answers. If admins make them up themselves and makes them random, it might deter the bots as there would be a endless number of possible answers.

  One more question, why isn't the users IP address logged durring registration? New users never have an IP address unless the activate and log in. Is there a way to log the IP address durring registration? This would help build a Block IP address list of habitual abusers making junk accounts just to get their back links out there for the search engines. I also causes me to question if the block IP address is even effective in blocking those IP's from registering. I assume it would stop them from logging in but what about stoping the spam users accounts from even getting entered in the database?

 

Bruce,

  I have logging set to True but I'm not seeing any log being generted. I left it set to default location till I make sure I'm getting log files but no joy. I'll watch it for a while and see if log start generating but as of now, I have no log files.

 Here's what my setup_options_inc looks like.