In my previous post, I showed how a one-line modification would allow you to route OpenID logins through BotBouncer to help protect your WordPress blog from bot-spam. There was one problem with the one-liner method though, it’d route logins through BotBouncer every time a user tried to login to your WordPress blog with their OpenID- even if they’d already been “verified as being human”.

I’ve just completed a slightly more extensive mod that uses the BotBouncer API to check if the OpenID has already been verified.

Rather than put up a <code> block, I put the diff output displaying my modifications on my dev/pub server. In order to use this modification, you’ll need to login to BotBouncer, and replace the example API key “AFAFAFAFAFAFAFAFAFAFAFAFAFAFAFAF” with your own.