Joris Le Blansch

<p>I like to use Contact Form 7 on most of my WordPress sites. It’s a powerful form manager that suits all my needs. I don’t like to use external calls to protect the forms from spam submissions though (like reCaptcha or hCaptcha) and don’t want to present a manual captcha to a user (math or other puzzle). Since I couldn’t find a really basic honeypot script that works on most entries, I created one here. Hopefully it’s useful to someone else also.</p>
<h3>Setup</h3>
<ul>
<li>Install the plugin using the regular plugin setup routine or upload the entire apiosys-honeypot-cf7 folder to the /wp-content/plugins/ directory.</li>
<li>Activate the plugin through the “Plugins” menu in WordPress, you MUST have Contact Form 7 AND Flamingo installed and enabled.</li>
<li>Add the following shortcodes to your Contact Form 7 forms:</li>
</ul>
<p>[honeypot] – Adds the hidden honeypot field<br />
[timestamp] – Adds time-based validation</p>
<ul>
<li>Complete the rest of the options which you can find in Admin > Contact > Honeypot. A generally good working set of values is enabled by default there.</li>
</ul>
<h3>What tests are used?</h3>
<ul>
<li>A Honeypot Field</li>
<li>A Checkbox Trap</li>
<li>Time-Based Validation</li>
<li>Email domain Check</li>
<li>Basic Content Analysis</li>
</ul>
<h3>Does it really work?</h3>
<p>It has been tested on several high-traffic WP sites. I see a return of ~ 1 ‰ (i.e. 1 in a thousand) of spam going through. That usually corresponds to humans paid to fill forms or sophisticated bots. Please feel free to contribute to make it even better. You can contribute directly <a href="https://github.com/apio-sys/apiosys-honeypot-cf7" rel="nofollow ugc">here</a>.</p>


Apio systems – Honeypot for Contact Form 7

Basic Honeypot plugin for Contact Form 7 to drastically reduce spam on form submissions without user interaction.

Denis V (Artprima)

<p>AP HoneyPot WordPress Plugin, based on Jan Stępień’s http:BL, allows you<br />
to verify IP addresses of clients connecting to your blog against the Project<br />
Honey Pot database. Thanks to http:BL API you can quickly check whether your<br />
visitor is an email harvester, a comment spammer or any other malicious<br />
creature. Communication with verification server is done via DNS request<br />
mechanism, which makes the query and response even quicker. Now, thanks<br />
to AP HoneyPot WordPress Plugin any potentially harmful clients are denied<br />
from accessing your blog and therefore abusing it.</p>
<h4>Your Feedback Matters</h4>
<p>Bugs to report? Feature requests? Criticism? New ideas? We want to hear from<br />
you! Do not hesitate. Get in touch with us and share your views.</p>


AP HoneyPot WordPress Plugin

Hard to believe I've been using this fro over 3 years, and the previous one before for even longer. No I wonder this is still being maintained, but still using in the meantime. 

Updated 3 years ago and still works great

AP HoneyPot WordPress Plugin allows you to verify IP addresses of clients connecting to your blog against the Project Honey Pot database.

Apio systems – Honeypot for Contact Form 7 vs AP HoneyPot WordPress Plugin