As many others have already noted, comment spam is a real issue with Drupal. I have recently received comment spam on deleted nodes. The comments are posted by some type of program that gets to a previously deleted node. Therefore I can't change the "user comments" to "read only".

Comments

jeremy’s picture

jeremy commented

Take a look at this patch for the comment module. Currently Drupal makes it very easy for a spammer to automate posting, as they can simply bypass the "preview" step. The formentioned patch patch enforces previews if you have your site configured to require them. Combine that patch with the new spam module, and Drupal is suddenly much more difficult to spam.

jeremy’s picture

jeremy commented
Status: Active » Fixed

The spam module has been updated to validate that new comments are attached to existing and published nodes.

avolve’s picture

avolve commented
jeremy’s picture

jeremy commented
Status: Fixed » Closed (fixed)

Closing manually. (I think the project module is broken, it keeps marking them updated when they should be closed.)