I have a site running Drupal 5.21 that is updated very, very rarely. It's essentially an archive of photos, videos and audio, and occasionally there are new blog posts. I'd love it if I could have commenting but don't know how to achieve that without getting an avalanche of spam. (I'm running Text captcha 5.x-3.1 but it doesn't seem to help.)
Recently I went to update the site and found several pages of spam comments waiting in the approval queue, and several pages of new user accounts. I know I had the settings such that only admin could create new user accounts, and I was the only admin.
I'm out of my depth here. I've disabled comments and put user settings back to admin only, but obviously if someone made changes before, they can do it again.
What should my next steps be? Should I upgrade? Add other modules?
And is there a way to bulk-remove spam posts and users?
Thanks in advance.