Hi all.
Well the scammers are getting through.
I have been looking at all the security systems over the last day.
Since it aint a user issue I decided to ripp out the security system.
The logic captcha is gone, the zerospam is gone, akismet and jetpack
protect are what I have now.
So I have enabled registration again but now have the simple recaptcha
in v3 mode.
This is supposed to stop spammers and not actually impact users.
Its monitoring everyone that logs in but its not going to do anything
unless you are bad.
There are other ways to handle this including just blocking registration
forms with recaptcha in annoying mode.
This may be it though.
I am now putting all my trust into jetpack and its akismet companion
software and seeing what it all does.
And its actually working!
No more spam registrations.
The plugin is called simple captcha recaptcha and it does what it does.
No spam, and we are getting users just going in.
Aparently it supports all the standard forms by default.
Looks like this is it.
All sorted for now.
And here we go. its fixed yaay.