[wp-trac] [WordPress Trac] #59343: site being used to relay messages by suspicious people, criminal activity

[WordPress Trac]

#59343: site being used to relay messages by suspicious people, criminal activity
--------------------------+----------------------
 Reporter:  mermax        |       Owner:  (none)
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  Comments      |     Version:
 Severity:  normal        |  Resolution:  invalid
 Keywords:                |     Focuses:
--------------------------+----------------------
Changes (by sabernhardt):

 * status:  new => closed
 * resolution:   => invalid
 * component:  Upload => Comments
 * milestone:  Awaiting Review =>


Old description:

> please see the COMMENTS section on my stite, i am unable to upload the
> evidence / screenshots here attached. I never set up a COMMENTS page on
> my site and it seems there is now a comment section and someone is using
> it to communicate under the radar.
>
> How are they able to do this? Can you please PLUG THIS HOLE so these
> people cant use my site for information exchange.
>
> please get back to me on this.
> https://maxsharam.com

New description:

 please see the COMMENTS section on my site, i am unable to upload the
 evidence / screenshots here attached. I never set up a COMMENTS page on my
 site and it seems there is now a comment section and someone is using it
 to communicate under the radar.

 How are they able to do this? Can you please PLUG THIS HOLE so these
 people cant use my site for information exchange.

 please get back to me on this.
 https://maxsharam.com

--

Comment:

 Hi and welcome to WordPress Core Trac!

 This problem would fit better on the
 [https://wordpress.org/support/forums/ support forums], and I found a
 related topic there.
 https://wordpress.org/support/topic/unwanted-comments-on-image-attachment-
 pages/

 You have attachment pages enabled, and at least some of those have an
 active comments form.
 Example: `https://www.maxsharam.com/index.php/thespian-max/screen_test-3/`

 Core has created one way to remove attachment pages in #57913. Another way
 to remove those pages is to use a plugin such as
 [https://wordpress.org/plugins/attachment-pages-redirect/ Attachment Pages
 Redirect] or [https://wordpress.org/plugins/wordpress-seo/ Yoast SEO].

 If you only wish to remove the comments forms from those pages, you could
 try one of these:
 - https://www.wpbeginner.com/wp-tutorials/how-to-completely-disable-
 comments-in-wordpress/#disable-comments-on-media
 - https://www.greengeeks.com/tutorials/disable-comments-for-media-
 attachments-in-wordpress/

 I have wanted comments off by default on attachment pages, which might be
 done in ticket:58375.

 Because this issue is not a Core //bug//, 'invalid' is the most
 appropriate resolution. In case some of the information in your second
 ticket was sensitive, I chose to delete the ticket instead of closing it
 as a duplicate.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/59343#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform