alessandro, I think he is using a variation on the calls to trackbacks, which is an interesting way to get things in. It can also happen I think by calling the comment POSTING script directly, which means they can fake all sorts of stuff. I put in a little plugin that blocks direct calls to the comments script and this particular spammer has stopped since.
Alex
|