R.Sabbir

<p>Stop contact form spam instantly with <strong>BotShield CAPTCHA for Contact Form 7</strong>. This all-in-one spam protection plugin integrates <strong>Google reCAPTCHA (v2 Checkbox & v3 Invisible)</strong>, <strong>Cloudflare Turnstile</strong> (Privacy-Focused), and lightweight <strong>Built-in Arithmetic/Image Challenges</strong> to block bots while letting real users pass.</p>
<p>Whether you need strict security or a friction-free user experience, BotShield gives you complete control over your specific form protection needs. No more spam submissions, fake leads, or automated bot attacks.</p>
<p>Protect Your Store with <strong>Enterprise-grade CAPTCHA & Security</strong>. <a href="https://woocommerce.com/products/securegate-captcha/" rel="nofollow ugc">SecureGate CAPTCHA</a> provides full-site protection, blocking bots, spam, and fraud using Cloudflare Turnstile, Google reCAPTCHA, hCaptcha, and Geo-Blocking — keeping your store fast, secure, and bot-free.</p>
<h4>Key Features & Benefits</h4>
<ul>
<li><strong>Multi-Provider Support</strong>: Choose between Google reCAPTCHA, Cloudflare Turnstile, or Self-hosted challenges.</li>
<li><strong>Google reCAPTCHA Integration</strong>: Supports both <strong>v2 (“I’m not a robot”)</strong> and <strong>v3 (Invisible)</strong> keys.</li>
<li><strong>Cloudflare Turnstile</strong>: The modern, privacy-friendly alternative that stops bots without annoying puzzles.</li>
<li><strong>Lightweight Built-in Protection</strong>: Use simple Math or Image CAPTCHAs without needing any external API keys.</li>
<li><strong>Seamless Contact Form 7 Integration</strong>: Adds a dedicated “BotShield” tag generator button directly to the CF7 editor.</li>
<li><strong>Mobile Optimized</strong>: Fully responsive challenges that work perfectly on smartphones and tablets.</li>
<li><strong>GDPR Compliant Options</strong>: Turnstile and Built-in modes offer excellent privacy compliance.</li>
<li><strong>Accessibility Ready</strong>: WCAG 2.1 compliant designs for screen reader support.</li>
</ul>
<h4>Flexible Protection Options</h4>
<p><strong>1. Google reCAPTCHA (The Industry Standard)</strong><br />
*   <strong>v2 Checkbox</strong>: The classic “I’m not a robot” checkbox users trust.<br />
*   <strong>v3 Invisible</strong>: valid users are verified in the background with zero interaction.</p>
<p><strong>2. Cloudflare Turnstile (Privacy-First)</strong><br />
*   Verify visitors without solving complex puzzles. Smart, fast, and respectful of user privacy.</p>
<p><strong>3. Built-in Challenges (No Keys Required)</strong><br />
*   <strong>Arithmetic</strong>: Simple math questions (e.g., 7 + 2 = ?) effective against basic bots.<br />
*   <strong>Alphanumeric</strong>: Distorted text images for traditional verification.<br />
*   <em>Zero external dependency, 100% self-hosted.</em></p>
<h4>Perfect For</h4>
<ul>
<li>Contact forms</li>
<li>Registration forms</li>
<li>Quote request forms</li>
<li>Newsletter signups</li>
<li>Any Contact Form 7 form needing spam protection</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.0 or higher</li>
<li>Contact Form 7 plugin (must be active)</li>
<li>PHP 7.4 or higher</li>
<li>GD PHP extension for image CAPTCHAs</li>
</ul>
<h3>Privacy Policy</h3>
<p>BotShield CAPTCHA does not:<br />
* Collect any personal data<br />
* Store user information<br />
* Transmit data to external servers<br />
* Use cookies or tracking<br />
* Share information with third parties</p>
<p>All CAPTCHA processing happens locally on your WordPress server. The plugin is fully GDPR compliant.</p>
<h3>Support & Documentation</h3>
<ul>
<li>Support Forum: https://wordpress.org/support/plugin/botshield-captcha/</li>
<li>Developer Website: https://www.rsabbir.com/</li>
</ul>
<h3>Contributing</h3>
<p>Contributions are welcome! Contact the developer or visit the GitHub repository to contribute to this plugin’s development.</p>
<h3>Credits</h3>
<ul>
<li>Developed by R. Sabbir (https://www.rsabbir.com/)</li>
<li>Tested with Contact Form 7 6.1.4 and later</li>
</ul>
<h3>Technical Specifications</h3>
<h4>Server Requirements</h4>
<ul>
<li>WordPress 5.0 or higher</li>
<li>PHP 7.4 or higher</li>
<li>Contact Form 7 plugin (active)</li>
<li>GD PHP extension (for image CAPTCHAs)</li>
</ul>
<h4>Browser Support</h4>
<ul>
<li>Chrome (latest versions)</li>
<li>Firefox (latest versions)</li>
<li>Safari (latest versions)</li>
<li>Microsoft Edge (latest versions)</li>
<li>Mobile browsers (iOS Safari, Chrome Mobile)</li>
</ul>
<h4>Security Features</h4>
<ul>
<li>Token-based validation system</li>
<li>HMAC-SHA256 signature verification</li>
<li>Automatic token expiration (5 minutes)</li>
<li>XSS protection</li>
<li>CSRF token protection</li>
<li>No session storage required</li>
</ul>
<h4>Performance</h4>
<ul>
<li>Code: ~50KB total size</li>
<li>Assets: Minified and optimized</li>
<li>Loading: Conditional asset loading on relevant pages</li>
<li>HTTP Requests: Zero external requests</li>
<li>Caching: Compatible with all major WordPress cache plugins</li>
</ul>


BotShield CAPTCHA for Contact Form 7


shows warning here after installation. 



Warning: Undefined array key "answer" in C:\xampp\htdocs\mc2\wp-content\plugins\botshield-captcha\includes\class-botshield-captcha-field.php on line 298



Warning: Undefined array key "hash" in C:\xampp\htdocs\mc2\wp-content\plugins\botshield-captcha\includes\class-botshield-captcha-field.php on line 299






quality code not added

BotShield CAPTCHA for Contact Form 7 – Advanced Spam Protection with Turnstile, reCAPTCHA, Arithmetic, and Alphanumeric.

Freemius

Emil Simunovic

<p>Authica™ upgrades the default WordPress login into a polished, on-brand experience with practical, layered security. It is built for agencies, developers, and site owners who want professional design control without sacrificing protection.</p>
<p><strong>Creator Program:</strong> We invite WordPress creators to publish an honest Authica walkthrough on YouTube (no positive review required).<br />
Find out more: <a href="https://authica.net/creator-program/" rel="nofollow ugc">authica.net/creator-program</a></p>
<p>Highlights:</p>
<ul>
<li>
<p>Customizer Login Design<br />
Brand every key element: logo, background, overlays, layout, and typography (including Google Fonts).</p>
</li>
<li>
<p>Email Verification<br />
Require users to confirm their email address before they can sign in.</p>
</li>
<li>
<p>Bot Protection<br />
Supports privacy-focused Cloudflare Turnstile.</p>
</li>
<li>
<p>Hide / Rename wp-login.php<br />
Reduce automated attacks by moving the login URL away from the default target.</p>
</li>
<li>
<p>Login & Logout Redirects<br />
Send users to the right page after login/logout (dashboard, custom URL, or role-based flows).</p>
</li>
<li>
<p>IP Restriction<br />
Allow/deny access to the login screen using IP rules.</p>
</li>
<li>
<p>Brute Force Protection<br />
Automatically rate-limit and block repeated failed login attempts.</p>
</li>
<li>
<p>Two-Factor Authentication (TOTP)<br />
Add app-based 2FA for stronger account security.</p>
</li>
<li>
<p>Security Logs & Alerts<br />
Monitor login activity and suspicious events from a single place.</p>
</li>
<li>
<p>Login Methods<br />
Social Login, Passkeys section foundation, and Magic Links with per-user passwordless link controls.</p>
</li>
</ul>
<p>Authica Free includes full visual branding tools plus core security features. Upgrade to Authica Pro for advanced controls and premium protections.</p>
<p>Learn more: <a href="https://authica.net" rel="nofollow ugc">https://authica.net</a></p>
<h3>Contributors</h3>
<p>emilsim (Emil Simunovic)</p>
<h3>Privacy</h3>
<p>This plugin uses an optional opt-in to collect <strong>non-sensitive diagnostic data</strong> and plugin usage information to help improve the product. The opt-in is presented on first use and can be changed at any time under <strong>Authica <span aria-hidden="true" class="wp-exclude-emoji">→</span> Account</strong>.</p>
<p>Collected data may include: WordPress/site version, language, plugin/theme list and versions, admin email (for license/updates), and anonymized site URL. <strong>No personal content or passwords are collected.</strong></p>
<p>Data is processed by our licensing/telemetry provider and by us for support and update delivery.<br />
• Provider’s Privacy & Terms: https://freemius.com/privacy/ , https://freemius.com/terms/</p>
<p>If you choose not to opt in, only the information required to deliver updates to your site is stored (license/installation ID, if you activate a license).</p>
<h3>Current Features</h3>
<p>Branding & Design<br />
– Upload your own logo<br />
– Customize colors, backgrounds, and overlays<br />
– Google Fonts<br />
– Live preview via WordPress Customizer</p>
<p>Security & Protection<br />
– Cloudflare Turnstile CAPTCHA integration<br />
– Email verification <em>(Pro)</em><br />
– Hide/Rename wp-login.php <em>(Pro)</em><br />
– Redirect Rules</p>
<p>User Experience<br />
– Custom welcome/error messages<br />
– Login & logout redirects<br />
– AJAX-powered login form<br />
– Mobile-first responsive design</p>
<h3>External services</h3>
<h4>Cloudflare Turnstile (human verification)</h4>
<p>This plugin can integrate with Cloudflare Turnstile to protect login, registration, and password-reset forms from automated abuse.</p>
<p>• What is it used for?<br />
  Turnstile provides a human verification widget to reduce bot signups and credential-stuffing attempts.</p>
<p>• What data is sent and when?<br />
  – On pages where the widget is shown, the Turnstile JavaScript file is loaded from<br />
    https://challenges.cloudflare.com/turnstile/v0/api.js. When loaded, Cloudflare<br />
    may receive standard browser/connection data (e.g., IP address, user agent, referrer)<br />
    and evaluate device/browser signals to determine risk, per Cloudflare’s documentation.<br />
  – When a verification token is produced by the widget, your WordPress site makes a<br />
    server-to-server request to:<br />
      https://challenges.cloudflare.com/turnstile/v0/siteverify<br />
    The server-to-server verification includes the user’s response token and your secret key.<br />
    When a valid client IP is available, the optional remoteip value may also be sent to Cloudflare to improve verification accuracy.</p>
<p>• Where can I learn more?<br />
  – Cloudflare Turnstile: https://www.cloudflare.com/products/turnstile/<br />
  – Turnstile docs: https://developers.cloudflare.com/turnstile/<br />
  – Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/<br />
  – Cloudflare Terms of Service: https://www.cloudflare.com/terms/</p>
<p>• How do I disable it?<br />
  Turnstile integrations can be disabled at <strong>Authica <span aria-hidden="true" class="wp-exclude-emoji">→</span> Turnstile & Edge Security</strong>, which stops the<br />
  widget from loading and the verification endpoint from being called.</p>
<h4>jsDelivr (Chart.js fallback, admin-only)</h4>
<p>For the admin “Captcha Statistics” chart, this plugin prefers a local copy of Chart.js<br />
(bundled in <code>assets/vendor/chart.js/</code>). If the local file is not present, it falls back to<br />
loading Chart.js from:<br />
  https://cdn.jsdelivr.net/npm/chart.js@4.4.3/dist/chart.umd.min.js</p>
<p>• What data is sent?<br />
  Only the administrator’s browser requests the static script file from the CDN.<br />
  No user content or personal data is transmitted by this plugin as part of that request.</p>
<p>• How do I avoid the CDN?<br />
  Keep the local file at <code>assets/vendor/chart.js/chart.umd.min.js</code> so the fallback is not used.</p>
<h4>Email delivery</h4>
<p>This plugin uses WordPress <code>wp_mail()</code> to send email verification messages. Mail delivery<br />
is handled by your hosting provider or any SMTP/email plugin you configure. If you connect<br />
a third-party email service (e.g., via an SMTP plugin), that service’s privacy terms apply.<br />
This plugin does not send verification data to any email vendor on its own.</p>
<h3>Trademark</h3>
<p>Authica™ is a trademark claimed by Emil Simunovic. Registration pending.<br />
WordPress is a registered trademark of the WordPress Foundation, used under license.</p>


Authica

Authica™ gives your WordPress site a fully branded and secure login experience.

BotShield CAPTCHA for Contact Form 7 vs Authica