Joris Le Blansch

<p>I like to use Contact Form 7 on most of my WordPress sites. It’s a powerful form manager that suits all my needs. I don’t like to use external calls to protect the forms from spam submissions though (like reCaptcha or hCaptcha) and don’t want to present a manual captcha to a user (math or other puzzle). Since I couldn’t find a really basic honeypot script that works on most entries, I created one here. Hopefully it’s useful to someone else also.</p>
<h3>Setup</h3>
<ul>
<li>Install the plugin using the regular plugin setup routine or upload the entire apiosys-honeypot-cf7 folder to the /wp-content/plugins/ directory.</li>
<li>Activate the plugin through the “Plugins” menu in WordPress, you MUST have Contact Form 7 AND Flamingo installed and enabled.</li>
<li>Add the following shortcodes to your Contact Form 7 forms:</li>
</ul>
<p>[honeypot] – Adds the hidden honeypot field<br />
[timestamp] – Adds time-based validation</p>
<ul>
<li>Complete the rest of the options which you can find in Admin > Contact > Honeypot. A generally good working set of values is enabled by default there.</li>
</ul>
<h3>What tests are used?</h3>
<ul>
<li>A Honeypot Field</li>
<li>A Checkbox Trap</li>
<li>Time-Based Validation</li>
<li>Email domain Check</li>
<li>Basic Content Analysis</li>
</ul>
<h3>Does it really work?</h3>
<p>It has been tested on several high-traffic WP sites. I see a return of ~ 1 ‰ (i.e. 1 in a thousand) of spam going through. That usually corresponds to humans paid to fill forms or sophisticated bots. Please feel free to contribute to make it even better. You can contribute directly <a href="https://github.com/apio-sys/apiosys-honeypot-cf7" rel="nofollow ugc">here</a>.</p>


Apio systems – Honeypot for Contact Form 7

Basic Honeypot plugin for Contact Form 7 to drastically reduce spam on form submissions without user interaction.

Greyhound Studio

<p>Antispam for Elementor Forms adds two methods of preventing spam submissions to Elementor Pro forms – checking the form contents against the WordPress comment blocklist, which is automatically synced daily, and a JavaScript-based honeypot field, with an optional minimum time to fill out the form.</p>
<p><strong>Privacy disclaimer</strong></p>
<p>This plugin uses the WordPress comment blocklist from GitHub (https://github.com/splorp/wordpress-comment-blacklist, via the raw.githubusercontent.com domain). It is synced daily. Your server’s IP address will be shared with GitHub when this happens. Their terms of use can be found here: https://docs.github.com/en/site-policy/github-terms/github-terms-of-service and their privacy statement can be found here: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement No data about your users is shared.</p>


Antispam for Elementor Forms

Practical spam prevention for Elementor Forms, without relying on third-party services.

Apio systems – Honeypot for Contact Form 7 vs Antispam for Elementor Forms