R. Sabbir

<p>BotShield CAPTCHA adds powerful yet simple CAPTCHA protection to your Contact Form 7 forms without requiring any third-party API keys or services. Keep your forms spam-free while maintaining complete user privacy.</p>
<h4>Features</h4>
<ul>
<li>Multiple CAPTCHA Types: Arithmetic challenges and alphanumeric image CAPTCHAs</li>
<li>Three Difficulty Levels: Easy, Medium, and Hard options to balance security and usability</li>
<li>No API Keys Required: Fully self-hosted solution with no external dependencies</li>
<li>WCAG 2.1 Accessible: Screen reader support and keyboard navigation included</li>
<li>Mobile Responsive: Perfect display on all devices and screen sizes</li>
<li>Three Built-in Themes: Default, Minimal, and Modern styles</li>
<li>GDPR Compliant: No data collection or third-party transmission</li>
<li>Lightweight: Minimal performance impact on your site</li>
<li>Auto-Refresh Option: Optional automatic CAPTCHA regeneration</li>
<li>Translation Ready: Full internationalization support with RTL language support</li>
</ul>
<h4>CAPTCHA Types</h4>
<p><strong>Arithmetic CAPTCHA</strong><br />
Simple math problems that are easy for humans but difficult for bots.<br />
* Easy: Addition/subtraction with numbers 1-10<br />
* Medium: Addition/subtraction with numbers 1-20<br />
* Hard: Addition, subtraction, and multiplication with numbers 1-50</p>
<p><strong>Alphanumeric Image CAPTCHA</strong><br />
Distorted text images with case-sensitive characters.<br />
* Easy: 4 character challenge<br />
* Medium: 5 character challenge<br />
* Hard: 7 character challenge</p>
<h4>Perfect For</h4>
<ul>
<li>Contact forms</li>
<li>Registration forms</li>
<li>Quote request forms</li>
<li>Newsletter signups</li>
<li>Any form needing spam protection</li>
</ul>
<h4>Security & Privacy</h4>
<ul>
<li>Token-based validation with HMAC signatures</li>
<li>Time-based expiration (5 minutes)</li>
<li>No external API calls</li>
<li>No data collection or storage</li>
<li>GDPR compliant</li>
<li>Fully self-hosted on your server</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.0 or higher</li>
<li>Contact Form 7 plugin (must be active)</li>
<li>PHP 7.4 or higher</li>
<li>GD PHP extension for image CAPTCHAs</li>
</ul>
<h3>Privacy Policy</h3>
<p>BotShield CAPTCHA does not:<br />
* Collect any personal data<br />
* Store user information<br />
* Transmit data to external servers<br />
* Use cookies or tracking<br />
* Share information with third parties</p>
<p>All CAPTCHA processing happens locally on your WordPress server. The plugin is fully GDPR compliant.</p>
<h3>Support & Documentation</h3>
<ul>
<li>Support Forum: https://wordpress.org/support/plugin/botshield-captcha/</li>
<li>Developer Website: https://www.rsabbir.com/</li>
</ul>
<h3>Contributing</h3>
<p>Contributions are welcome! Contact the developer or visit the GitHub repository to contribute to this plugin’s development.</p>
<h3>Credits</h3>
<ul>
<li>Developed by R. Sabbir (https://www.rsabbir.com/)</li>
<li>SVG icons included (no external icon dependencies)</li>
<li>Tested with Contact Form 7 5.8 and later</li>
</ul>
<h3>Technical Specifications</h3>
<h4>Server Requirements</h4>
<ul>
<li>WordPress 5.0 or higher</li>
<li>PHP 7.4 or higher</li>
<li>Contact Form 7 plugin (active)</li>
<li>GD PHP extension (for image CAPTCHAs)</li>
</ul>
<h4>Browser Support</h4>
<ul>
<li>Chrome (latest versions)</li>
<li>Firefox (latest versions)</li>
<li>Safari (latest versions)</li>
<li>Microsoft Edge (latest versions)</li>
<li>Mobile browsers (iOS Safari, Chrome Mobile)</li>
</ul>
<h4>Security Features</h4>
<ul>
<li>Token-based validation system</li>
<li>HMAC-SHA256 signature verification</li>
<li>Automatic token expiration (5 minutes)</li>
<li>XSS protection</li>
<li>CSRF token protection</li>
<li>No session storage required</li>
</ul>
<h4>Performance</h4>
<ul>
<li>Code: ~50KB total size</li>
<li>Assets: Minified and optimized</li>
<li>Loading: Conditional asset loading on relevant pages</li>
<li>HTTP Requests: Zero external requests</li>
<li>Caching: Compatible with all major WordPress cache plugins</li>
</ul>


BotShield CAPTCHA for Contact Form 7

Add simple CAPTCHA protection to Contact Form 7 forms. No API keys required! Prevent spam with arithmetic or image-based challenges.

Kasuga

<p>Tiny Comment Spam Blocker is a lightweight yet powerful plugin designed to protect your WordPress comments from spam. It employs five different techniques to detect and block unwanted comments:</p>
<ol>
<li><strong>Nonce Verification</strong> – Ensures that the comment form submission is genuine.</li>
<li><strong>Submission Time Check</strong> – Blocks comments submitted too quickly to prevent bots.</li>
<li><strong>Honeypot Field</strong> – Hidden field that traps automated spam bots.</li>
<li><strong>User Agent Validation</strong> – Detects suspicious User-Agent strings and blocks them.</li>
<li><strong>Forbidden Word Filtering</strong> – Blocks submissions containing words or phrases from a configurable list within the <strong>comment body, email address, or IP address.</strong></li>
</ol>
<p>These filters are applied in order: if a comment passes the first check, it proceeds to the second, and so on, until all checks are applied or the comment is blocked.</p>
<p>Additional features:</p>
<ul>
<li>Option to log detected spam in a local log file (up to 1.0 MB).</li>
<li>Optional email notifications when spam is detected.</li>
<li>Easy settings page in the WordPress admin panel.</li>
</ul>
<h3>Settings</h3>
<p>The plugin provides the following settings in the WordPress admin panel:</p>
<ul>
<li><strong>Enable Spam Protection</strong> – Toggle the spam protection on or off. When disabled, all anti-spam checks are skipped.</li>
<li><strong>Save Spam Detection Log</strong> – Enable or disable logging of detected spam. Logs are saved in a local file up to 1.0 MB within the WordPress uploads directory.</li>
<li><strong>Notification Email Address</strong> – Enter an email address to receive notifications when spam is detected. Leave blank to disable email notifications.</li>
<li><strong>Minimum Submission Time (seconds)</strong> – Set the minimum allowed time between loading the comment form and submitting a comment. Comments submitted faster than this threshold are considered spam.</li>
<li><strong>Forbidden Words List</strong> – Enter one forbidden word, phrase, or IP address per line. Submissions containing these entries in the comment body, <strong>email address</strong>, or <strong>IP address</strong> will be blocked. <strong>Case is insensitive.</strong>
<ul>
<li><strong>Example:</strong><br />
viagra<br />
online pharmacy<br />
spam@email.com<br />
164.138.205.72</li>
</ul>
</li>
</ul>
<h3>Arbitrary Section</h3>
<p>This plugin is designed to be lightweight and fast, ensuring minimal impact on site performance while providing robust protection against comment spam.</p>


Tiny Comment Spam Blocker

A simple and lightweight yet rock-solid plugin that blocks comment spam using multiple automatic detection methods.

BotShield CAPTCHA for Contact Form 7 vs Tiny Comment Spam Blocker