Ultimate Guide: How to Completely Disable Comments in WordPress (100% Effective)
Introduction
Comments are a great way to engage with readers, but sometimes they attract spam, clutter your site, or serve no purpose—especially on business websites, portfolios, or landing pages.
Even after disabling comments from WordPress settings, spam bots may still target your site via wp-comments-post.php.
In this complete guide, you’ll learn how to fully disable comments in WordPress—on all posts, pages, and even block bots from submitting them programmatically.
Block wp-comments-post.php (Stop Bots!)
Spam bots can submit comments directly to: bash Copy Edit
/wp-comments-post.php
Even if you disable the form, bots bypass it. Here’s how to block it completely.
.htaccess Method (Apache)
<Files wp-comments-post.php>
Order Deny,Allow
Deny from all
</Files>
Extra Tips for Advanced Users
Use a Web Application Firewall (WAF) or Cloudflare Rules to block bots by user-agent or POST requests to /wp-comments-post.php
Schedule a daily job to auto-close comments on older posts
Monitor new comments regularly in case a plugin or new post reopens them
Final Words
Disabling comments in WordPress completely is more than just unchecking a box. Bots and outdated posts can still be entry points. By following this step-by-step guide, you can confidently secure your site and ensure no unwanted comments sneak through.