Joris Le Blansch

<p>I like to use Contact Form 7 on most of my WordPress sites. It’s a powerful form manager that suits all my needs. I don’t like to use external calls to protect the forms from spam submissions though (like reCaptcha or hCaptcha) and don’t want to present a manual captcha to a user (math or other puzzle). Since I couldn’t find a really basic honeypot script that works on most entries, I created one here. Hopefully it’s useful to someone else also.</p>
<h3>Setup</h3>
<ul>
<li>Install the plugin using the regular plugin setup routine or upload the entire apiosys-honeypot-cf7 folder to the /wp-content/plugins/ directory.</li>
<li>Activate the plugin through the “Plugins” menu in WordPress, you MUST have Contact Form 7 AND Flamingo installed and enabled.</li>
<li>Add the following shortcodes to your Contact Form 7 forms:</li>
</ul>
<p>[honeypot] – Adds the hidden honeypot field<br />
[timestamp] – Adds time-based validation</p>
<ul>
<li>Complete the rest of the options which you can find in Admin > Contact > Honeypot. A generally good working set of values is enabled by default there.</li>
</ul>
<h3>What tests are used?</h3>
<ul>
<li>A Honeypot Field</li>
<li>A Checkbox Trap</li>
<li>Time-Based Validation</li>
<li>Email domain Check</li>
<li>Basic Content Analysis</li>
</ul>
<h3>Does it really work?</h3>
<p>It has been tested on several high-traffic WP sites. I see a return of ~ 1 ‰ (i.e. 1 in a thousand) of spam going through. That usually corresponds to humans paid to fill forms or sophisticated bots. Please feel free to contribute to make it even better. You can contribute directly <a href="https://github.com/apio-sys/apiosys-honeypot-cf7" rel="nofollow ugc">here</a>.</p>


Apio systems – Honeypot for Contact Form 7

Basic Honeypot plugin for Contact Form 7 to drastically reduce spam on form submissions without user interaction.

Olaf Lederer

<p>This free contact form plugin is used to create accessible contact forms with advanced spam protection (honeypot, cookie and optionally Cloudflare Turnstile or hCaptcha). In contrary to most other form plugins, there is no form-builder included.</p>
<h4>Features</h4>
<ul>
<li>The generated form is accessible and works even when the visitor has disabled Javascript</li>
<li>Accessible form field validation</li>
<li>Protect your forms against spam bots using a honeypot and cookies</li>
<li>Track successfully submitted forms in Google Analytics and/or Clicky</li>
<li>Create multiple contact forms via an easy to use interface and add the form via the block editor or using a shortcode</li>
<li>Collect form submissions for all your forms or the forms you choose</li>
<li>Get insights which spam protection feature works the best for your form. A simple log file keeps track about the different spam attempts</li>
<li>Multiple responder emails, send a HTML formatted mail in response to the form submission</li>
<li>Works with the default wp_mail() function (use it together with the <a href="https://wordpress.org/plugins/simple-smtp-by-maileroo/" rel="ugc">Maileroo</a> plugin to send emails via SMTP)</li>
<li>Optional: Protect your forms by blocking specific countries which are not relevant for your website or business</li>
<li>Optional: Protect your contact form with the plugin <a href="https://wordpress.org/plugins/honeypot/" rel="ugc">WP Armour – Honeypot Anti Spam</a></li>
<li>Optional: Email address verification with the verification API from <a href="https://maileroo.com/?r=acfplugin" rel="nofollow ugc">Maileroo</a></li>
<li>Optional: Form fields for Company name, phone number, website and an accept terms checkbox</li>
<li>Optional: Redirect the visitor after a succesful form submission to a “Thank you” page</li>
<li>Optional: Use the plugin’s CSS style-sheet for your forms</li>
<li>Optional: Protect your forms with Cloudflare Turnstile or hCaptcha</li>
<li>Optional: For additional spam protection, you can add a simple and accessible challenge to your form.</li>
</ul>
<p>The plugin is built to keep stuff simple. If you need a complex web form or if you need a form builder, please use one of the form plugins you can find in the WordPress repository. To use the “Block countries” feature we use the IP to Country API from Country.is. They offer a free service and you don’t need an API key.</p>


Ajax Contact Form

An easy to use contact form plugin with multiple inbuilt features to prevent contact form spam.

Apio systems – Honeypot for Contact Form 7 vs Ajax Contact Form