word press spamming even though set to no posting

Which file(s) to remove

[eljefe3]

I have a static website built on wordpress that keeps getting spammed even though I have the setting to " no comments" Obviously there is a work around via some of the standard files.

Which files/directories do I need to remove?

The site is set to not make any more posts nor change, so I don't need to worry about future posts or what not. I just want to stop having to go and " mark all as spam" every day.

[encyclo]

You can simply delete the file

wp-comments-post.php

- it is impossible to post comments if this file is missing (many bots call the file directly).

You should also consider removing

xmlrpc.php

and

wp-trackback.php

- neither of which should affect normal operation.