Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

My experience running my own comment system is eventually you'll get spammed in bulk. Then, if you didn't make some kind of management UI you'll have to create one or write scripts/queries to try to repair the damage.

This is one of many reasons first switched to wordpress before going static and using disqus. I switched to wordpress because I got tired of having to add features to my blog software (whatever the must have feature of the day was, RSS, Atom, Trackback, etc etc etc..) and because I got spammed and had only written the code for posting comments, not for managing. Wordpress's anti-spam Akismet, failed for me though. Too much spam came through adding to my workload. So I switched to disqus.

At the time, and maybe this is still true, disqus would put the comments in your wordpress database so if you ever decided to quit disqus you still had the comments.

Then eventually I got tired of the extra work of wordpress itself (having to update monthly) and went static + disqus.

I get the entire point is you probably don't like disqus because you're being tracked and/or want a different UX etc, and you should do whatever you want. There is enjoyment making your own systems. I wanted to blog to share things though and maintaining a comment system was time not writing posts.



I usually modify HTML forms so that they won’t work and fix them with javascript. This gives me almost zero spam.

You can do this for WordPress, but you will need to change comments endpoint, since spam software knows where to make a request.


This is a very interesting idea. Even if spammers became aware of it, adding a time delay could further filter.


> I usually modify HTML forms so that they won’t work and fix them with javascript. This gives me almost zero spam.

Interesting. One would assume that most spammers use automated browsers with JavaScript enabled.


Most of the spammers target well known engines such as WordPress. If you use a static website with an external comment engine, most of them simply won't find your website.


Unless you're large and popular to warrant custom case, spam en-masse is almost always computer generated and certainly without JavaScript support, you can battle it easily.

Just add an input with value which is submitted when user has no javascript. Change that value via javascript and check for existance server-side.

This has been working well ever since comment spammers became a thing 15 or something years ago. It has not failed me since.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: