LaughterOnWater

<p><strong>GhostTrap</strong> provides sophisticated invisible spam protection using a comprehensive 5-layer detection system. Legitimate users comment normally while automated spam is silently blocked through advanced timing analysis, cryptographic validation, and behavioral detection.</p>
<h4>5-Layer Protection System</h4>
<ul>
<li><strong>Timing Analysis</strong> – Detects submissions too fast for human interaction</li>
<li><strong>Cryptographic Signatures</strong> – Prevents replay attacks and form manipulation</li>
<li><strong>Year Validation</strong> – JavaScript-enhanced field verification</li>
<li><strong>JavaScript Detection</strong> – Ensures legitimate browser interaction</li>
<li><strong>Honeypot Fields</strong> – Multiple hidden traps catch automated bots</li>
</ul>
<h4>Professional Features</h4>
<ul>
<li><strong>Enhanced Admin Interface</strong> – Professional statistics dashboard with custom branding</li>
<li><strong>Real-time Statistics</strong> – Track protection effectiveness with detailed blocking metrics</li>
<li><strong>Configurable Timing</strong> – Adjust detection sensitivity from 5-300 seconds</li>
<li><strong>WordPress 6.4+ Compatible</strong> – Full support for block themes and FSE</li>
<li><strong>Admin Bar Integration</strong> – Quick spam statistics for administrators</li>
<li><strong>Screen Options Control</strong> – User-configurable interface elements</li>
</ul>
<h4>Zero User Friction</h4>
<p>All protection operates invisibly – no captcha, no puzzles, no delays. Users with JavaScript enabled see normal comment forms, while those with disabled JavaScript get simple year validation. Protection effectiveness remains high in both scenarios.</p>
<h4>Performance Optimized</h4>
<ul>
<li><strong>Lightweight JavaScript</strong> – Only 2KB, loads exclusively on comment pages</li>
<li><strong>Smart Script Loading</strong> – Conditional loading based on comment form presence</li>
<li><strong>Minimal Database Impact</strong> – Efficient storage with optional spam archiving</li>
<li><strong>Browser Compatibility</strong> – Works across all modern browsers with graceful degradation</li>
</ul>
<h4>GDPR Compliant</h4>
<p>No external services, no tracking, no personal data collection beyond standard WordPress comment processing. All spam detection happens locally on your server.</p>
<h4>Attribution</h4>
<p>Built upon the original Anti-spam plugin foundation by webvitaly, with comprehensive modernization, enhanced detection layers, and professional admin interface for current WordPress compatibility.</p>
<h3>Privacy Policy</h3>
<p>GhostTrap operates with privacy-first design principles:</p>
<ul>
<li><strong>No External Services</strong> – All spam detection processing occurs on your server</li>
<li><strong>No Personal Data Collection</strong> – Uses only standard WordPress comment data for protection</li>
<li><strong>No Tracking or Analytics</strong> – Zero data sharing with third parties or external systems</li>
<li><strong>GDPR Fully Compliant</strong> – Minimal data processing with transparent, local-only operation</li>
<li><strong>Optional Spam Storage</strong> – Blocked comments stored locally only if explicitly enabled</li>
</ul>
<h3>Advanced Configuration</h3>
<h4>Timing Threshold Recommendations</h4>
<ul>
<li><strong>High Security Sites:</strong> 10-15 seconds (stricter protection)</li>
<li><strong>General Purpose Sites:</strong> 15-20 seconds (balanced protection)</li>
<li><strong>Accessibility-Focused Sites:</strong> 25-30 seconds (accommodates slower interaction)</li>
<li><strong>Reading-Heavy Sites:</strong> 30+ seconds (allows time for content review)</li>
</ul>
<h4>Admin Interface Customization</h4>
<ul>
<li><strong>Admin Bar Statistics</strong> – Toggle spam counter visibility in admin bar</li>
<li><strong>Screen Options</strong> – Control information panel display on comments page</li>
<li><strong>Dashboard Integration</strong> – Spam statistics in “At a Glance” widget</li>
<li><strong>Contextual Help</strong> – Comprehensive protection information in WordPress help system</li>
</ul>
<h4>Technical Requirements</h4>
<p><strong>Server Environment:</strong><br />
* WordPress 5.0 or higher<br />
* PHP 7.4 or higher<br />
* Standard WordPress hosting with wp_options table access</p>
<p><strong>Browser Support:</strong><br />
* All modern browsers (Chrome, Firefox, Safari, Edge)<br />
* Internet Explorer 11+ with graceful degradation<br />
* Mobile browsers with full functionality<br />
* JavaScript-disabled browsers with fallback protection</p>
<p><strong>Performance Specifications:</strong><br />
* JavaScript payload: ~2KB minified and compressed<br />
* Database impact: Single option row with minimal queries<br />
* Server processing: Sub-millisecond detection analysis<br />
* Memory usage: Negligible footprint during comment processing</p>


GhostTrap

Advanced 5-layer invisible spam protection for comments. No captcha, no user friction - professional spam blocking.

Till Krüss

<p>A lightweight plugin that protects plain email addresses and mailto links from email-harvesting robots, by encoding them into decimal and hexadecimal entities. Has an effect on the posts, pages, comments, excerpts, text widgets and other filtered content. Works without JavaScript — just simple spam protection.</p>
<p>To see whether all your email addresses are properly protected, use the free <a href="https://encoder.till.im/scanner?utm_source=wp-plugin&utm_medium=readme" rel="nofollow ugc">page scanner</a> tool.</p>
<p>Other content (like phone numbers) can be protected using <code>[encode]</code> shortcode:</p>
<pre><code>[encode]+1 (555) 123-4567[/encode]
[encode link="tel:+15551234567"]+1 (555) 123-4567[/encode]
</code></pre>
<h4>Premium Features</h4>
<ul>
<li><strong>Full-page protection</strong> that catches all email addresses</li>
<li><strong>Hardened protection</strong> using JavaScript and CSS techniques</li>
<li>Improved <strong>phone number</strong> protection</li>
<li>Built-in plugin support for <strong>ACF</strong>, <strong>Jetpack</strong>, <strong>WooCommerce</strong> and many others</li>
</ul>
<p>Check out the <a href="https://encoder.till.im/download?utm_source=wp-plugin&utm_medium=readme" rel="nofollow ugc">Premium</a> version of Email Address Encoder.</p>
<p><a href="http://coderisk.com/wp/plugin/email-address-encoder/RIPS-r0bJqKvBws" rel="nofollow ugc"></a></p>


Email Address Encoder


This might work with page or post content, but does not with widgets. I can't recommend using this and suggest to use the plugin "Email Encoder" by Jannis Thuemming instead, since that does the job out of the box.


Not working with widgets

A lightweight plugin that protects email addresses from email-harvesting robots, by encoding them into decimal and hexadecimal entities.

GhostTrap vs Email Address Encoder