Andrew Norcross

Grant Hutchinson

Comment Blacklist Manager retrieves a list of terms from a remote source and updates the <code>disallowed_keys</code> setting in WordPress. The plugin will automatically fetch a list of terms on a regular schedule and update the contents of the “Disallowed Comment Keys” field. Terms added manually via the “Local Blacklist” field will be retained during the scheduled updates. Terms added manually to the “Excluded Terms” field will be removed from the list.
The default list of terms is fetched from a <a href="https://github.com/splorp/wordpress-comment-blacklist/" title="Comment Blacklist for WordPress" rel="nofollow ugc">GitHub</a> repository maintained by <a href="https://splorp.com/" title="Interface considerations. Gadget accumulation. Typography. Scotch." rel="nofollow ugc">Grant Hutchinson</a>.

Comment Blacklist Manager

Does as advertised. I especially liked how you can exclude words from the automated blacklist if they don't suit your website.



Great Little Plugin

Remotely add terms to the WordPress Disallowed Comment Keys field to manage spam.

Riccardo Rosignoli

🛡️ DigitaleZen AntiSpam Shield for CF7 is a lightweight yet powerful plugin that protects Contact Form 7 forms from spam, bots, and suspicious submissions.
It combines a multi-layered defense system, including:
<ul>
<li>Invisible honeypot field</li>
<li>Hourly-expiring SHA256 token</li>
<li>Automatic flood protection</li>
<li>Temporary IP firewall</li>
<li>Real-time blacklist updates every 24h (StopForumSpam, Spamhaus, SpamCop)</li>
<li>Advanced CSV logging</li>
<li>Interactive dashboard with chart and bot log</li>
<li>Weekly report via email (configurable)</li>
</ul>
<blockquote>
✅ No complex setup. No CAPTCHA. No data collection. 
 Works out-of-the-box.
</blockquote>
<h3>Features</h3>
<ul>
<li>🔐 Invisible honeypot protection </li>
<li>⏱️ Minimum send time (4 seconds) </li>
<li>🔑 SHA256 token valid for 2 hours </li>
<li>🧱 Soft IP firewall (10-minute ban) </li>
<li>📩 Dynamic blacklist: IPs, emails, domains, keywords, usernames </li>
<li>💥 Flood protection: 3 submissions = auto ban </li>
<li>🧾 Detailed logging (date, IP, email, reason, trigger) </li>
<li>📈 Interactive chart of blocked spam by type and timeframe </li>
<li>📬 Weekly email reports </li>
<li>🧘 Clean and minimalist DigitaleZen-style UI </li>
<li>🔒 Admin-only dashboard access</li>
</ul>
<h3>External services</h3>
This plugin periodically downloads an updated anti-spam blacklist from a service operated by DigitaleZen and hosted on Google Apps Script (domain: script.google.com).
• Purpose: fetch a JSON list of abusive/disposable emails and domains used by the plugin’s firewall checks. 
• When data is sent: once per day via WP-Cron (and when an admin triggers a manual update). 
• What data is sent: no form submissions and no user personal data are sent. The request is server-to-server (HTTP GET) and only standard headers (e.g., User-Agent) are included. 
• Storage: the downloaded JSON is stored locally within your WordPress site (e.g. under wp-content/uploads in a plugin-specific folder).
Provider policies (service owner): DigitaleZen — https://digitalezen.it/terms/ • https://digitalezen.it/privacy-policy/ 
Hosting platform policies (infrastructure): Google — https://policies.google.com/terms • https://policies.google.com/privacy

DigitaleZen AntiSpam Shield for CF7

The ultimate shield for Contact Form 7. Blocks spam with honeypots, tokens and a live blacklist—no CAPTCHA.

Comment Blacklist Manager vs DigitaleZen AntiSpam Shield for CF7