On my wordpress blog for my educational portfolio, I have checked that all users must have a login to comment. Yet on my blog, spammers keep posting comments to the page. They are held for approval but I don't even want that. They shouldn't be able to post at all as they are not users! I am the only user on the page.
Am I missing something?
The blog is here:
I'm using WordPress 2.0.3 on that site. I know I should upgrade but I haven't had time recently.