GeekParadize

Comment Word Blacklist Manager will retrieve a list of blacklist terms from a remote source and update the <code>blacklist_keys</code> setting in WordPress. The list will update itself on a schedule to keep your terms current. Any manually added items will be retained, and an exclusions list is also created if there are terms from the source you want to allow.

Comments Word Blacklist Manager

Remotely add known terms into the WordPress blacklist keys to manage spam

Riccardo Rosignoli

🛡️ DigitaleZen AntiSpam Shield for CF7 is a lightweight yet powerful plugin that protects Contact Form 7 forms from spam, bots, and suspicious submissions.
It combines a multi-layered defense system, including:
<ul>
<li>Invisible honeypot field</li>
<li>Hourly-expiring SHA256 token</li>
<li>Automatic flood protection</li>
<li>Temporary IP firewall</li>
<li>Real-time blacklist updates every 24h (StopForumSpam, Spamhaus, SpamCop)</li>
<li>Advanced CSV logging</li>
<li>Interactive dashboard with chart and bot log</li>
<li>Weekly report via email (configurable)</li>
</ul>
<blockquote>
✅ No complex setup. No CAPTCHA. No data collection. 
 Works out-of-the-box.
</blockquote>
<h3>Features</h3>
<ul>
<li>🔐 Invisible honeypot protection </li>
<li>⏱️ Minimum send time (4 seconds) </li>
<li>🔑 SHA256 token valid for 2 hours </li>
<li>🧱 Soft IP firewall (10-minute ban) </li>
<li>📩 Dynamic blacklist: IPs, emails, domains, keywords, usernames </li>
<li>💥 Flood protection: 3 submissions = auto ban </li>
<li>🧾 Detailed logging (date, IP, email, reason, trigger) </li>
<li>📈 Interactive chart of blocked spam by type and timeframe </li>
<li>📬 Weekly email reports </li>
<li>🧘 Clean and minimalist DigitaleZen-style UI </li>
<li>🔒 Admin-only dashboard access</li>
</ul>
<h3>External services</h3>
This plugin periodically downloads an updated anti-spam blacklist from a service operated by DigitaleZen and hosted on Google Apps Script (domain: script.google.com).
• Purpose: fetch a JSON list of abusive/disposable emails and domains used by the plugin’s firewall checks. 
• When data is sent: once per day via WP-Cron (and when an admin triggers a manual update). 
• What data is sent: no form submissions and no user personal data are sent. The request is server-to-server (HTTP GET) and only standard headers (e.g., User-Agent) are included. 
• Storage: the downloaded JSON is stored locally within your WordPress site (e.g. under wp-content/uploads in a plugin-specific folder).
Provider policies (service owner): DigitaleZen — https://digitalezen.it/terms/ • https://digitalezen.it/privacy-policy/ 
Hosting platform policies (infrastructure): Google — https://policies.google.com/terms • https://policies.google.com/privacy

DigitaleZen AntiSpam Shield for CF7

The ultimate shield for Contact Form 7. Blocks spam with honeypots, tokens and a live blacklist—no CAPTCHA.

Comments Word Blacklist Manager vs DigitaleZen AntiSpam Shield for CF7