XF 1.3 Posting without having an approved username

[Spartan]

A spambot appears to have found a way to post without having a registered username, and there is no record in the mod log of the post being approved (I have the first ten posts to require mod approval).

Any thoughts?

 

[Jake Bunce]

Is the username in the post hyperlinked or not? A hyperlinked username would belong to a registered user. Non-hyperlinked means it's a guest post (not registered). If it's a guest post then maybe your Unregistered group has posting permissions...

 

[Spartan]

Is the username in the post hyperlinked or not? A hyperlinked username would belong to a registered user. Non-hyperlinked means it's a guest post (not registered). If it's a guest post then maybe your Unregistered group has posting permissions...

Not a hyper link. The post and reply permission in the unregistered user group is set to, "not set."

 

[Jake Bunce]

Not a hyper link. The post and reply permission in the unregistered user group is set to, "not set."

Then maybe you have mistakenly granted access to that group in a specific forum:

Admin CP -> Applications -> Display Node Tree -> Permissions

 

[Spartan]

Then maybe you have mistakenly granted access to that group in a specific forum:

Admin CP -> Applications -> Display Node Tree -> Permissions

Damn. That's exactly what it was. I wondered why the posts were all to the same forum.

Thanks.