[Jack Yan]

Hi there:

Killspam has worked all along until now: I have two users who cannot be dealt to. They are repeat spammers, and they can still get in, despite having been killspammed before. Each time I click on the ‘Killspam this user’ link, all it does is add -killspam to the end of their address, but they can still do what they always did.

For example, one of the users is now:

reginaprice40@yahoo.com-killspam-killspam-killspam-killspam-killspam

She can still get in and add spam entries and comments. In addition, the links and comments do not disappear.

I have tried refreshing the page, etc., to no avail, although the killspam function works on other offenders.

Can anyone help?

Regards,

Jack

[Yankidank]

When a user is killspammed it resets their password and appends -killspam to their email address so that they can not log in or request a password reset. It should also remove their comments and story submissions from the site. If for some reason the user is able to still log in you could just remove their account entirely from the system by removing their user entry from the mysql database, in the table pligg_users. I would suggest against this since you lose the information that is kept about the spammer like their IP address.
The best idea would be to ban their IP from your site by adding this to your .htaccess file. The first example bans a full IP, the second line with numbers will block a wider range of IPs that share the same subnet.

order allow,deny
deny from 123.45.6.7
deny from 012.34.5.
allow from all

[Jack Yan]

Hi Yankidank:

Thanks again for being so responsive. What is odd is that with these two users, Pligg does not remove their comments or entries when I click ‘Killspam this user’. Basically all it does is append -killspam to their email addresses, but their spam remains there.

Killspam works exactly as you say for everyone else, just not these two.

I would not mind learning how to ban certain email addresses, though. A lot of my spammers are from something called myspacee.info.

Best,

Jack

[Yankidank]

You might want to look into this hack that allows you to ban certain domains from being used for registered email addresses:
How to deny certain email domains at sign-up??