I have a whole supply of EE sites under my belt and, as a rule, does not have a big problem with spam. However, one site that I care about has recently been bombarded with registration spam. This is an extremely low traffic site and was slightly neglected, which meant that it was launching an old version of EE.
Now I upgraded the site to the latest version of EE and went through a double check that everything was blocked. I even tried installing Low NoSpam, but I still get logging attempts.
My initial thoughts were that there was a security hole in this old version of EE. But since I updated everything, I'm not sure.
What is the best way to handle this, except to turn off registration?
source share