Hey, it looks like the jerks at some online poker 777 crap place are blog-spamming like crazy. They not only call wp-comments-post.php directly, they do if for future posts. So, that means that you immediately get a comment with their spam when you post a new article. I used phpMyAdmin to remove all 25 or 30 of their stinkin’ posts and then set up some Apache mod_rewrite rules. No one can access wp-comments-post.php directly anymore. They must be refered from my site, which makes sence as the only way you should be able to post a comment is if you first see the story. Go figure. We’ll see if this keeps them out….heh heh…

I added this to my Apache httpd.conf file for this blog site:

RewriteEngine On
RewriteCond %{HTTP_REFERER} "!^http://my.site/.*$" [NC]
RewriteCond %{REQUEST_URI} ".*wp-comments-post.php$"
RewriteRule .* - [F]

Remember to change “my.site” to your site and the ‘wp-comments-post.php’ file name to what ever you have called it if you have decided to change it’s name as well, as described in this post. Notice that you may prevent legitimate users from making comments if their browser does not send the referer header – shame on them.