http://answers.yahoo.com/question/index?qid=20110624061353AAKnJ3i

without support from Hollywood advertisements Yahoo might be wiped out from earth, we have two Hollywood media, one is paper version People magazine, the other is online version – Yahoo : )

http://www.amazon.com/Seagate-FreeAgent-Ultra-Portable-External-STAA1500100/dp/B00455MCRA/ref=sr_1_3?ie=UTF8&qid=1323374924&sr=8-3

the construction of the drives is very important, according to his review, Seagate FreeAgent GoFlex external usb 3 has best construction, this usb 3 drive is also backward compatible with usb 2, now I remember I dropped the Western Digital hard drive one time, that was light drop, I used other hard drives before, never seen a hard drive so fragile like Western Digital My Passport hard drive, I will get a new Seagate FreeAgent GoFlex 1.5 TB hard drive to replace Western Digital My Passport hard drive.

1. upgrade WordPress to latest version
2. enforce referrer rules in Apache .htaccess
3. delete the “spam users” registered by spammers
4. reset users password
5. add CAPTCHA verification code on login page
6. add Login Logger plugin
7. change comment form to add security checks such as verification code
8. add a timer
9. add a log to track comment form
10. disable trackback and pingback in Discussion Setting
11. disable trackback and pingback for all existing posts and pages
12. disable Post via Email in WordPress

The step 7 listed above is an important step, if you identify the spams were posted via comment form, you can customize WordPress’s “loose” comment form to add security check, verification code is sufficient for most cases, there are other tricks to enforce security of comment form. I know most our spams were not from comment form, because I add a log to track comment form, it shows the remote computers’ IP address, even IP addresses were fake, that indicates they most likely were from trackback or pingback, need to disable them in step 10 and 11.

Before do step 11, back up database, and run two SQL commands to disable trackback and pingback for all existing posts and pages:
UPDATE wp_posts SET ping_status=’closed’ WHERE post_status = ‘publish’ AND post_type = ‘post’;
UPDATE wp_posts SET ping_status=’closed’ WHERE post_status = ‘publish’ AND post_type = ‘page’;

WordPress is a free open source software, there is not much protection for security, I could not believe that there are trackback, pingback, and Post via Email, and these features are enabled by default, trackback and pingback can be disable by check box in Discussion Setting, there is no check box to diable/uncheck Post via Email, I just blank out all the fields for Post via Email feature.

Enforce referrer rules from WordPress,
http://codex.wordpress.org/Combating_Comment_Spam/Denying_Access

Login Logger plugin is a good tool to track login activities, here is link to the plugin,
http://wordpress.org/extend/plugins/login-logger/

Link to CAPTCHA plugin,
http://wordpress.org/extend/plugins/si-captcha-for-wordpress/

Since we enforced WordPress security, we don’t have any spams on KeyPoints.com, Is manual data entry considered spam? hopefully spammers can find better fun things to do:)