Question "Anoymous" user posting spam

Hi there,

I have same problem. After upgrade to Kunena 5.1.0 today, I am facing Anonymous advertisement posts.
Although my forum is set to "Public writing = No" still there are replies with Anonymous user and no profile link.

I have not changed any setting after my update to Kunena 5.1.0 and I have never faced this issue with any previous version of the Forum software.
The strange point is, that this users POST requests are resulting in a 303 Error, but are still shown in the forum.

GET /index.php?option=com_kunena&view=topic&catid=13&id=77839&Itemid=2592&limitstart=10 HTTP/1.1
POST /index.php?option=com_kunena&Itemid=2592 HTTP/1.1

I hope that there is a quick fix to this issue, as otherwise my forum may be flooded with this kind of posts.

Thanks in advance and have a great weekend

Michael

I'm seeing a similar problem in the last few days since updating to 5.1.0. I've had three instances so far of obvious marketing spam showing up as anonymous guest posts requiring moderator approval. I have guest posting turned off and anonymous posting turned off. I'm running a forum for a small university lab, our users are mostly gone for the summer so I know nobody who is supposed to be on the forum is doing this. How are these getting through?

is the spam a new topic or new reply?

810 wrote: is the spam a new topic or new reply?

in my case they were spam posted into replies to existing threads

Hi 810

In my case it’s just Replies

Best regards

Michael

there is a extra security option, please change Direct Component Access to "No", but check if everything is working. It can preventing logins ect.

Which Kunena template are you using, and which reply option do you have set.

Maybe then i can reproduce the issue.

Ok, i have added some extra checks, please try the nightly build and please give any feedback after some days, if its working correctly now.

810 wrote: there is a extra security option, please change Direct Component Access to "No", but check if everything is working. It can preventing logins ect.

I made this change and brought my forum back online. Within 4 hours, I had yet another anonymous post trying to sell dodgy jewelry.
Guest posting is off, anonymous posting is off, direct component access is off.

(Have now taken forum offline again until we can fix this.)

Like the above poster, the spam posts are all replies to threads.

I made again an extra check, please try now.
If this doesn't work, then i don't know. Then its a joomla user. Not a bot with access to post.