WPmu problem

[Lemmy]

I have a dormant WPmu install that I haven't been paying much attention to over the past year. Due to some recent database problems I took a closer look today and holy fuck, over 7000 spamblogs was created!

After spending the better part of this morning deleting blogs/users I looked for a way to turn off new signups in the admin, but no luck. I finally deleted wp-signup.php, but still these fucking bots are creating new blogs at the rate of 5-6/hour.

Does anybody know how to disable signups/creation of new blogs in WPmu for anyone but the admin?

[hashbury]

go to site admin then choose options, there will be a setting to disable user blogs

[Lemmy]

Did that, both the limited email registrations and banned email domains options and still there are 9 new registrations/blogs since I started this thread. And keep in mind there is no signup page. I'm stumped.

[hashbury]

If you disabled new registrations and your still getting them, something is seriously wrong. Im not a wp wizz, but do you think someone hacked it?

[Lemmy]

Originally Posted by hashbury

Im not a wp wizz, but do you think someone hacked it?

I'm starting to wonder... The only other explanation I can think of is that there were already some unconfirmed confirmation emails out there when I disabled signups and they are now trickling in.

I've put my host on the case and I'll see what they come up with.

[cd34]

You have disabled signups, but, any pending activation is still valid. Noted in your ticket with a more verbose explanation.

[Lemmy]

Originally Posted by cd34

You have disabled signups, but, any pending activation is still valid. Noted in your ticket with a more verbose explanation.

Problem solved, no new signups in the last 5 hours.