Justin Parr

<h3>Update: 6/2015</h3>
Changed e-mail token and math problem confirmation logic. Previously, everything happened all at once, and the user would get prompted mutliple times for the math problem. 
Now, the user must answer the math problem first, before the e-mail token is sent. Once the math problem is correctly answered within the session, it isn’t asked again. The user must now enter the correct token, which results in successful registration. 
SPECIAL THANKS TO OLEG M. FOR HELPING ME IDENTIFY, FIX, AND TEST THE ERROR!!
<h3>Update: 5/2015</h3>
Added E-mail confirmation token. Prevents registration until user enters a token sent via e-mail.
<h3>Features:</h3>
<ul>
<li>Prevent users from registering, if their IP or e-mail address is listed in the “Comments” blacklist (Settings..Discussion)</li>
<li>E-mails user a 4-digit token, and requires the user to enter the token in order to register.</li>
<li>Users must solve a simple math problem (Add two one-digit numbers).</li>
<li>Places user IP address in “Website” field.</li>
</ul>
This is a super-simple user registration spam countermeasure. I searched for a plugin that was SIMPLE and EFFECTIVE. I looked at quite a few plugins that promised the desired effect, but were either cumbersome, or included too many unneeded or unwanted features. Likewise, there are some very simple plugins that are less-than-effective.
<h3>This plugin is VERY simple:</h3>
If the user’s IP or e-mail address is listed in the “Discussion” comments blacklist, it prevents the user from registering. This functionality should really be built in to WordPress, so, you’re welcome.
When the user registers, they are presented with a simple math problem – adding a 3-digit number to a 1-digit number. 99% of the “user reg spam” is based on bots being able to attack the basic WordPress registration form. By adding even a simple math problem, most bots will fail, removing your site as a target of opportunity. Criminals go after what’s easy – if you make it slightly more difficult for them, they will go after someone else.
Once the user solves the math problem, they are sent a 4 digit token via e-mail, and must enter that token to continue registration.
Finally, knowing the location from where your users register allows you to more effectively evaluate and block the source. This plugin adds the user’s IP address (at the time of registration) to the “Website” field.
Go to http://whois.arin.net to find out who they are. If you decide to block the IP, add the IP address, part of the IP address, or e-mail domain to the “Discussion” comments blacklist, and ANY user registrations from an IP address matching that pattern will be blocked.
<h3>Configuration</h3>
<h3>To Configure the Plugin:</h3>
NOTE: NO CONFIGURATION IS REQUIRED. This plugin is fully-functional using the default values.
In the Plugins page, click “Settings” underneath the “JP User Registration Blacklist” plugin.
<ul>
<li>
Seed: This value determines how the answer to the math problem is masked. Periodically change this, to keep the spammers and criminals at bay. The initial value is randomly-generated.
</li>
<li>
Failed Math Response: Error message displayed to the user, if they fail to correctly solve the math problem.
</li>
<li>
Rejected IP or E-mail: Error message displayed to the user, if their IP or e-mail is blocked. Keep this simple and generic, to keep them from knowing why they are being blocked.
</li>
<li>
Form field name for math problem: This field name contains the user’s answer to the math problem. Periodically change this, to keep the bots away. The initial value is randomly-generated.
</li>
</ul>
<h3>To Block an IP address</h3>
<ol>
<li>In the WordPress Dashboard, go to “Settings…Discuss”</li>
<li>To block all or part of an IP address, add it on its own line to “Comments Blacklist”</li>
<li>To block all or part of an e-mail address, add it on its own line to “Comments Blacklist”</li>
<li>Click “Save” 
(For more details, see Examples)</li>
</ol>

JP User Registration Blacklist

Prevent User Registration Spam, and Track New User IP address

Frank Corso

SiteAlert

SiteAlert checks your WordPress installation to ensure that it is healthy, up to date, and secure. Use the SiteAlert page to quickly see the results of the checks using the simple color-coded sections.
Once installed, there will be a new SiteAlert page added to the Tools menu and heart icon to your admin bar if the results of these checks need attention.
Over 10,000 active installations and 280+ five star reviews!
<a href="https://sitealert.io/pricing" rel="nofollow ugc">Get instant alerts, premium performance monitoring, and more with our premium plan!</a>
<h4>Currently Checks</h4>
WordPress Version 
This plugin checks to make sure that your site is using the latest version of WordPress.
MySQL or MariaDB Version 
This plugin checks to make sure that your server is using a recent version of the database software.
PHP Version 
This plugin checks to ensure that your server is running a version of PHP that is still receiving security updates.
Plugin Updates 
This plugin checks to make sure all your plugins are up to date.
Inactive Plugins 
This will check to ensure that you do not have any inactive plugins.
Admin Username 
This check ensures that you do not have a user with the username of “admin” on your site.
Plugins No Longer Being Supported 
This plugin checks to see if you have any plugins installed that are no longer supported by the developer.
Theme Updates 
This plugin checks to make sure all of your themes are up to date.
SSL 
Checks to see if you have SSL on your site.
File Editor 
Checks if your site has disabled the file editor.
Spam Comments 
Checks to make sure you don’t have too many spam comments.
<h4>Need more?</h4>
Check out our affordable <a href="https://sitealert.io" rel="nofollow ugc">premium plan</a> that includes:
Email Notifications 
Receive summaries for all your sites including any warnings, broken links, and more!
Uptime Monitoring 
Get notified immediately via SMS or Email if your site goes down.
Page Speed Monitoring 
Keep track of how fast your site is loading.
Email Deliverability Monitoring 
SiteAlert will alert you if emails from your site are no longer being delivered.
Broken Link Monitoring 
Discover any broken links on your site before your visitors do.
Broken Images Monitoring 
Get notified if you have any broken images on your site.
Blacklist Monitoring 
SiteAlert will monitor dozens of lists and alert you if your site is blacklisted.
Moz Domain Authority Monitoring 
Monitor changes in your site’s Moz Domain Authority.
Alexa Rank Monitoring 
Monitor changes in your site’s Alexa Rank.
Accessibility Monitoring (Beta) 
SiteAlert will scan your site an alert you of potential accessibility concerns.
<a href="https://sitealert.io" rel="nofollow ugc">Learn more about our premium plan!</a>
<h4>Make Suggestions Or Contribute</h4>
SiteAlert <a href="https://github.com/SiteAlert/sitealert-wordpress-plugin" rel="nofollow ugc">is on GitHub</a>!
Optional REST API 
If you are a developer, this plugin integrates with the REST API. The endpoints can be enabled from the settings tab of the “SiteAlert” page in the tools menu.

SiteAlert (Formerly WP Health)

Peace of mind that your site is secure and running smoothly. Performance monitoring, security checks, and instant alerts if your site goes down.

JP User Registration Blacklist vs SiteAlert (Formerly WP Health)