WP-SpamShield – WordPress Anti-Spam Plugin

Powerful and consumer-pleasant WordPress anti-spam protection that forestalls spam on weblog feedback, contact varieties, registrations, and every part else.

The All-in-One Anti-Spam Plugin for WordPress – Without CAPTCHAs

Leading edge WordPress spam safety, with NO CAPTCHAs, problem questions or different inconvenience to website guests. This plugin works silently within the background, and merely makes WordPress spam disappear.

Supports: Contact Form 7, Gravity Forms, Ninja Forms, JetPack Contact Forms & Comments, BuddyPress, bbPress, WooCommerce, s2Member, WP-Members, Mailchimp, Mailpoet, Formidable Forms, all WordPress varieties, and all WordPress registration varieties. Automatically!

Even earlier than turning into a premium plugin, in simply three.5 years the free model of WP-SpamDefend established a rock-strong fame for offering the most effective anti-spam safety obtainable, incomes its spot because the #2 hottest WordPress anti-spam plugin. It's additionally one of many prime 20 most downloaded WordPress plugins of all time with over four million complete downloads, one of many prime 100 hottest plugins of all time, and has earned over 1,000 5-star critiques on WordPress.org, with a mean score of four.eight/5.zero stars.


Plugin Documentation | Troubleshooting Guide | FAQs | Support Requests

How It Works

Most of the spam hitting your website originates from bots, however fairly a bit comes from people too. This plugin works like a firewall to make sure that your commenters are in truth, human, and that these people aren't spamming you.

Two Layers of Spam Blocking

There are two layers of vanguard anti-spam safety that work collectively to block each automated (spambots) and human spam:

  1. The JavaScript/Cookies Anti-Spam Layer
  2. The Algorithmic Anti-Spam Layer

The first anti-spam layer makes use of a dynamic mixture of JavaScript and cookies to weed out the people from spambots, stopping 100% of automated spam from ever attending to your website. Even if bot authors might engineer a approach to break by way of the JavaScript/Cookies Anti-Spam Layer, the Algorithmic Anti-Spam Layer would nonetheless cease virtually all the spam that the JavaScript Layer blocks, and offers near a totally redundant backstop. This JavaScript Anti-Spam Layer makes use of a number of randomly generated keys, and is algorithmically enhanced to make sure that spambots gained't beat it. The highly effective Algorithmic Anti-Spam Layer consists of over 100 superior filters, and eliminates trackback spam and most human spam as nicely. And, it does all that with out hindering professional feedback, trackbacks, contact types, or registrations.

No More Wasted Time Sifting Through the Comment Spam Queue

This sort of answer works invisibly within the background, with no inconveniences. You gained't should waste priceless time sifting by way of a spam queue any extra, as a result of there gained't be something there.

WP-SpamDefend is totally different from different anti-spam plugins in that it BLOCKS spam on the entrance door of your website and doesn't permit it into the WordPress database in any respect. Many different anti-spam plugins merely label a remark as spam, leaving you to type via a spam queue, which wastes your worthwhile time. WP-SpamDefend offers you again your time!

Improves User-Friendliness of Your Website

If you need to enhance the consumer-friendliness of your website, that is THE anti-spam plugin you need. After all, why ought to your customers need to show they're human? Since your customers gained't be inconvenienced by outdated and irritating anti-spam strategies, you'll present a smoother, hassle-free expertise in your web site customers, which results in improved readership, advert income, gross sales, or different forms of conversion, and subsequently larger success in your web site.

Improves Security

Not permitting spam into the database improves safety by probably stopping SQL injection, DDoS, and XSS exploit assaults by way of automated spam remark submissions. WP-SpamDefend fixes the safety points inherent to Pingbacks, and prevents Pingback-based DDoS assaults. As a part of the Miscellaneous Form Spam Protection, the plugin protects towards XML-RPC brute drive amplification assaults. The plugin additionally has a number of different options that enhance safety, resembling blocking sure probably harmful URLs in spam remark submissions, and limiting remark measurement to 15kb. (15kb of textual content is roughly the equal of three typed pages in Microsoft Word, single-spaced, in order that's greater than sufficient for even the longest of feedback.) See this weblog publish for more information.

Helps Improve Overall Website Performance

The plugin helps maintain your WordPress database slimmer and extra environment friendly (retaining your website operating quicker in the long run) by not permitting the hundreds upon hundreds of spam feedback into it, which might bloat the database and probably corrupt it. Keeping your database lean is extraordinarily essential, as a result of bloated databases end in for much longer question occasions and elevated server load, slowing down a website dramatically even for easy features. If web site efficiency is essential to you, you then undoubtedly need an anti-spam plugin like WP-SpamDefend as an alternative of a plugin that makes use of a spam queue. See this FAQ for extra detailed information.

ZERO False Positives

It does all this with ZERO false positives, due to the tactic used to dam spam. Notice we didn't say a “low false positive rate” – we stated ZERO false positives. If a remark/contact type/registration will get blocked as spam, the consumer is given immediate suggestions and has an opportunity to right their remark/contact type/registration/and so on and check out once more, which suggests there can't be false positives. This results in fewer annoyed web site guests, and fewer be just right for you. We are dedicated to maintaining the promise of zero false positives.

100% Pingback/Trackback Validation and Anti-Spam

The trackback validation incorporates a filter that compares the shopper IP handle of the incoming trackbacks and pingbacks towards the IP tackle of the server the place the hyperlink is supposedly coming from. If they don't come from the identical server, then it's assured spam, with out fail. This alone eliminates greater than 99.99% of trackback & pingback spam. Trackback spammers don't ship spam out from the identical server the place their shoppers' web sites reside. There are algorithmic anti-spam filters in place to make sure 100% trackback/pingback spam blocking. You could be assured that solely authentic trackbacks and pingbacks will get via.

Includes a Spam-Free Contact Form, and Anti-Spam for Contact Form 7, Gravity Forms, Ninja Forms, JetPack Contact Forms, and Most Other Forms

Includes drop-in spam-free contact type, with straightforward one-click on set up. Easy to make use of – no configuration mandatory, however you possibly can configure it should you like. (See Installation for information.) WP-SpamDefend additionally consists of automated anti-spam safety for Contact Form 7, Gravity Forms, Ninja Forms, JetPack Contact Forms, Fast Secure Contact Forms, Formidable Forms, and extra. (You don't need to do a factor…simply add your Contact Form 7, Gravity Forms, Ninja Forms, JetPack Contact Forms, or different varieties to your website, and they'll mechanically be protected.) It will mechanically shield most varieties in your WordPress website from automated spam, even when they don't seem to be listed right here.

WordPress Registration Anti-Spam

The plugin additionally consists of highly effective safety from consumer registration spam. Once you put in WP-SpamDefend, you don't have to fret about bots or spammy customers signing up any extra. (Note: This protects virtually all registration varieties, together with the WordPress default registration type, and registration types for bbPress, BuddyPress, WooCommerce, s2Member, WP-Members, and lots of extra. See this FAQ for more information.

Stops Email Harvesters

The plugin has a function to thwart e mail harvesting bots and maintain them from scraping your website for e mail addresses. (Which helps scale back spam in your e mail inbox.) The plugin routinely obfuscates plain textual content e-mail addresses and mailto hyperlinks in your web site content material by encoding them into HTML entities (hexadecimal and decimal character codes that seem like gibberish to harvesters, however render the e-mail addresses completely in a browser). It protects e-mail addresses on pages, posts, feedback, excerpts, and textual content widgets.

Why Not Just Use a CAPTCHA-Based Anti-Spam Method?

The idea of utilizing a CAPTCHA as an anti-spam answer on this modern-day and age is flawed for a number of causes:

  1. It's an outdated idea that has far outlived its usefulness, and was initially developed earlier than consumer-friendliness was a excessive precedence.
  2. It goes within the actual other way of consumer-pleasant design rules. Think about it. Users of your web site need to sort in numbers and letters obscured by squiggly strains and symbols, solely to be informed they're mistaken a number of occasions, even after typing within the right reply. This is confirmed to harm web site enterprise and income due to the adverse emotions it causes. People merely don't like CAPTCHAs.
  3. It just isn't the consumer's duty to separate people from bots, or to cease spam; it's the online developer's duty. Even if the CAPTCHA is straightforward, and all of the consumer has to do is click on a button, it's nonetheless annoying and pointless. It's one additional step that you're placing between your consumer and their finish objective.
  4. CAPTCHAs may be defeated. In reality, bots have been cracking CAPTCHAs since 2008. The solely advantage of a CAPTCHA was that it was thought-about to be unbeatable by bots. That day is gone.
  5. Why use a CAPTCHA when there are higher options that don't inconvenience your web site customers?

Optimized and Scalable – Won't Slow Down Your Site

This plugin has a particularly low overhead and gained't decelerate your website, in contrast to another anti-spam plugins. Each of the filters within the plugin have been benchmarked, and when processing feedback for spam, the quickest filters are put on the entrance of the stack. Once a remark exams constructive for spam, the testing course of terminates and won't interact the remaining filters. Additionally, as talked about above, by protecting spam out of the WordPress database altogether, WP-SpamDefend helps maintain your database slimmer and extra environment friendly, which in flip helps maintain your website operating quicker. This effectivity helps hold the server load down, and helps enhance the general efficiency of your website. WP-SpamDefend is optimized to work properly with all main caching plugins.

Faster than the Cloud

Speaking of scalability, WP-SpamDefend can kill spam quicker than any cloud-based mostly anti-spam answer. Cloud-based anti-spam plugins are inherently slower at processing spam as a result of they've to hook up with an exterior server to examine the spam standing, which in flip will improve your website's server load. With WP-SpamDefend, all anti-spam processing occurs instantly in your web site's server, with lightning velocity.

Responsive and Helpful Tech Support

If you will have any points with the plugin, we're right here to assist. Simply submit a help request on the WP-SpamDefend Support Page, and we'll aid you diagnose and repair the difficulty shortly.

Additional Features

  1. WP-SpamDefend offers automated anti-spam safety for: Contact Form 7 types, Gravity Forms, Ninja Forms, JetPack Contact Forms; BuddyPress, bbPress and WooCommerce registration varieties; Mailchimp signup types; virtually all different WordPress varieties; and virtually all registration varieties!
  2. As of model 1.9.2, WP-SpamDefend protects JetPack Comments from spam. (Making it one of many few anti-spam plugins that works with JetPack Comments.)
  3. A counter in your dashboard to maintain monitor of all of the spam it's blocking. The numbers will present how efficient this plugin is.
  4. See what's been blocked with “Blocked Comment Logging Mode”, a short lived diagnostic mode that logs blocked spam (feedback, trackbacks, registrations, and call type submissions) for 7 days, then turns off routinely. If you need to see what spam has been blocked, or confirm that all the things is working, flip this on and see what WP-SpamDefend is defending your website from.
  5. Multiple languages out there and extra on the best way. Currently consists of Dutch (nl_NL), French (fr_FR), German (de_DE), Indonesian (id_ID), Italian (it_IT), Serbian (sr_RS), and Swedish (sv_SE) translations. Ready for translation into different languages.
  6. Easy to put in – really plug and play. Just add and activate. (Installation Status on the plugin admin web page to let you recognize if plugin is put in appropriately.)
  7. Compatible with, and optimized for all main cache plugins, together with WP Super Cache, WP Fastest Cache, and lots of others. Not all anti-spam plugins can say that.
  8. Display your blocked spam stats in your website. Customizable widgets for graphic counters to show spam stats, in a number of colours, sizes and choices.
  9. Works in WordPress Multisite as nicely. (See the associated FAQ for particulars.)
  10. Enhanced Comment Blacklist choice. Instead of simply sending feedback to moderation as with WordPress's default Comment Blacklist performance, with this turned on, something that matches a string within the blacklist can be utterly blocked. Block particular human spammers by IP, e-mail handle, or a lot of different choices. The Enhanced Comment Blacklist has some enhancements over the default WordPress blacklist performance, and provides a hyperlink within the remark & contact type notification emails that may allow you to blacklist a spammer's IP with one click on. It additionally offers some superior customized choices for blocking spam on every thing else that WP-SpamDefend protects.
  11. WP-SpamDefend Whitelist choice. Allows you to specify sure customers who you need to let bypass the antispam filters.
  12. This plugin is authorized to make use of in Germany and the EU, and doesn't violate European privateness legal guidelines. It doesn't use any sort of cloud-based mostly service, knowledge is just not transmitted out of your server to some other server, and all anti-spam processing occurs immediately in your web site's server.

Languages Available

  • English
  • Dutch (nl_NL)
  • French (fr_FR)
  • German (de_DE)
  • Indonesian (id_ID)
  • Italian (it_IT)
  • Serbian (sr_RS)
  • Swedish (sv_SE)

If you want to assist translate, please get in contact with us.

Minimum Requirements

  • WordPress four.zero+ (Recommended: WordPress four.5 or greater)
  • PHP 5.three+ (Recommended: PHP 5.6 or larger) [PHP 7 Compatible: YES – 100%]
  • Your server have to be configured to permit using an .htaccess file. The overwhelming majority of customers could have no difficulty right here, as a result of most net hosts permit this by default. However, if yours doesn't, you will want to contact them and ask them to allow it in your website. If they gained't, then it's time to get a greater net host. WordPress loses a whole lot of performance in the event you don't have use of .htaccess enabled, so that is essential for full performance of WordPress and different plugins as properly.) Note: By definition, a standalone Nginx server wouldn't meet this requirement, however an Apache/Nginx hybrid setup would. (Nginx is setup as a reverse-proxy in entrance of Apache. This sort of setup presents excessive-efficiency and is advisable.)

Please see the plugin documentation's minimal necessities part for extra info.

To discover net hosts that meet and exceed the necessities, see our record of really helpful net hosts.