Riccardo Rosignoli

<p>🛡️ <em>DigitaleZen AntiSpam Shield for CF7</em> is a lightweight yet powerful plugin that protects <strong>Contact Form 7</strong> forms from spam, bots, and suspicious submissions.</p>
<p>It combines a <strong>multi-layered defense system</strong>, including:</p>
<ul>
<li>Invisible honeypot field</li>
<li>Hourly-expiring SHA256 token</li>
<li>Automatic flood protection</li>
<li>Temporary IP firewall</li>
<li>Real-time blacklist updates every 24h (StopForumSpam, Spamhaus, SpamCop)</li>
<li>Advanced CSV logging</li>
<li>Interactive dashboard with chart and bot log</li>
<li>Weekly report via email (configurable)</li>
</ul>
<blockquote>
<p>✅ No complex setup. No CAPTCHA. No data collection.<br />
  Works out-of-the-box.</p>
</blockquote>
<h3>Features</h3>
<ul>
<li>🔐 Invisible honeypot protection  </li>
<li>⏱️ Minimum send time (4 seconds)  </li>
<li>🔑 SHA256 token valid for 2 hours  </li>
<li>🧱 Soft IP firewall (10-minute ban)  </li>
<li>📩 Dynamic blacklist: IPs, emails, domains, keywords, usernames  </li>
<li>💥 Flood protection: 3 submissions = auto ban  </li>
<li>🧾 Detailed logging (date, IP, email, reason, trigger)  </li>
<li>📈 Interactive chart of blocked spam by type and timeframe  </li>
<li>📬 Weekly email reports  </li>
<li>🧘 Clean and minimalist DigitaleZen-style UI  </li>
<li>🔒 Admin-only dashboard access</li>
</ul>
<h3>External services</h3>
<p>This plugin periodically downloads an updated anti-spam blacklist from a service operated by DigitaleZen and hosted on Google Apps Script (domain: script.google.com).</p>
<p>• Purpose: fetch a JSON list of abusive/disposable emails and domains used by the plugin’s firewall checks.<br />
• When data is sent: once per day via WP-Cron (and when an admin triggers a manual update).<br />
• What data is sent: no form submissions and no user personal data are sent. The request is server-to-server (HTTP GET) and only standard headers (e.g., User-Agent) are included.<br />
• Storage: the downloaded JSON is stored locally within your WordPress site (e.g. under wp-content/uploads in a plugin-specific folder).</p>
<p>Provider policies (service owner): DigitaleZen — https://digitalezen.it/terms/ • https://digitalezen.it/privacy-policy/<br />
Hosting platform policies (infrastructure): Google — https://policies.google.com/terms • https://policies.google.com/privacy</p>


DigitaleZen AntiSpam Shield for CF7

The ultimate shield for Contact Form 7. Blocks spam with honeypots, tokens and a live blacklist—no CAPTCHA.

WEB-SHOP-HOSTING

<p>The plugin adds two new Widgets to the Elementor-PRO Forms builder.<br />
– <strong>Phone Country Code</strong> – choosing a telephone prefix depending on the country<br />
– <strong>DropZone</strong> – Drag & Drop multiple file upload field<br />
– <strong>Advanced Honeypot</strong> – Improved up-to-date spam filtering</p>
<h4>Phone Country Code</h4>
<ul>
<li>Telephone prefix depending on the country.</li>
<li>Provides the ability to select a searchable telephone prefix.</li>
<li>The search works both by prefix number and by country name.</li>
<li>The standard for WP language file is used, then it allows to translate the selector depending on the change of the locale inside WP.</li>
<li>In the display of countries there is a flag image, which makes it easier to find and makes it richer. When displaying an empty value, there is an automatic determination of the current country using geolocation based on IP identification.<br />
<span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/ZR9bkXPnsuc?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></li>
</ul>
<h4>DropZone</h4>
<ul>
<li>File will be shown in Elementor -> Submission</li>
<li>File can be send by email<br />
<span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/JSFna01AnwM?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></li>
</ul>
<h4>Advanced Honeypot – better reCaptcha alternative</h4>
<p>We added an advanced honeypot widget to elementor pro forms.<br />
<span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/102sMMmQsPA?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span><br />
This widget is very similar to the native elementor widget, except for very important differences.<br />
Elementor Form fields can be required or optional.<br />
Spiders that send spam through forms take into account the presence of traps and try to bypass them, for example,<br />
they check for the presence of required fields in form and fill in only its so as not to fall into honeypot spam filters.<br />
The honeypot field that the elementor provides can only be optional, because if you make it required,<br />
normal visitors will not be able to fill it out, since it is not displayed on the front (it is hidden) and the form simply will not submit by the browser, since the required fields are checked by the browser (even invisible).<br />
At the same time, it turns out that the optional fields are not filled with spiders just to bypass the honeypot.<br />
Our honeypot implementation is different in that the honeypot field is always shown as required for spiders, but then this attribute is removed using JavaScript.<br />
The spider reads only the html and sees that the field is required and fills it in, this causes the spam filter to work. For real visitors,<br />
this field is invisible and JavaScript removes the mandatory attribute for this field, i.e. spam filter is not activated.<br />
In addition, the native honeypot field has a “display: none;” style written directly into the input tag that clearly tells the spiders that the field is not visible to users and is a potential trap.<br />
In our version of the widget, the honeypot field is hidden through styles that are in a common style block that is difficult for spiders to find our traps field.</p>


Startklar Elementor Addons

The plugin expands the Elementor-PRO Forms builder with Country Code selector, DropZone and Advanced Honeypot.

DigitaleZen AntiSpam Shield for CF7 vs Startklar Elementor Addons