LaughterOnWater

<p><strong>GhostTrap</strong> provides sophisticated invisible spam protection using a comprehensive 5-layer detection system. Legitimate users comment normally while automated spam is silently blocked through advanced timing analysis, cryptographic validation, and behavioral detection.</p>
<h4>5-Layer Protection System</h4>
<ul>
<li><strong>Timing Analysis</strong> – Detects submissions too fast for human interaction</li>
<li><strong>Cryptographic Signatures</strong> – Prevents replay attacks and form manipulation</li>
<li><strong>Year Validation</strong> – JavaScript-enhanced field verification</li>
<li><strong>JavaScript Detection</strong> – Ensures legitimate browser interaction</li>
<li><strong>Honeypot Fields</strong> – Multiple hidden traps catch automated bots</li>
</ul>
<h4>Professional Features</h4>
<ul>
<li><strong>Enhanced Admin Interface</strong> – Professional statistics dashboard with custom branding</li>
<li><strong>Real-time Statistics</strong> – Track protection effectiveness with detailed blocking metrics</li>
<li><strong>Configurable Timing</strong> – Adjust detection sensitivity from 5-300 seconds</li>
<li><strong>WordPress 6.4+ Compatible</strong> – Full support for block themes and FSE</li>
<li><strong>Admin Bar Integration</strong> – Quick spam statistics for administrators</li>
<li><strong>Screen Options Control</strong> – User-configurable interface elements</li>
</ul>
<h4>Zero User Friction</h4>
<p>All protection operates invisibly – no captcha, no puzzles, no delays. Users with JavaScript enabled see normal comment forms, while those with disabled JavaScript get simple year validation. Protection effectiveness remains high in both scenarios.</p>
<h4>Performance Optimized</h4>
<ul>
<li><strong>Lightweight JavaScript</strong> – Only 2KB, loads exclusively on comment pages</li>
<li><strong>Smart Script Loading</strong> – Conditional loading based on comment form presence</li>
<li><strong>Minimal Database Impact</strong> – Efficient storage with optional spam archiving</li>
<li><strong>Browser Compatibility</strong> – Works across all modern browsers with graceful degradation</li>
</ul>
<h4>GDPR Compliant</h4>
<p>No external services, no tracking, no personal data collection beyond standard WordPress comment processing. All spam detection happens locally on your server.</p>
<h4>Attribution</h4>
<p>Built upon the original Anti-spam plugin foundation by webvitaly, with comprehensive modernization, enhanced detection layers, and professional admin interface for current WordPress compatibility.</p>
<h3>Privacy Policy</h3>
<p>GhostTrap operates with privacy-first design principles:</p>
<ul>
<li><strong>No External Services</strong> – All spam detection processing occurs on your server</li>
<li><strong>No Personal Data Collection</strong> – Uses only standard WordPress comment data for protection</li>
<li><strong>No Tracking or Analytics</strong> – Zero data sharing with third parties or external systems</li>
<li><strong>GDPR Fully Compliant</strong> – Minimal data processing with transparent, local-only operation</li>
<li><strong>Optional Spam Storage</strong> – Blocked comments stored locally only if explicitly enabled</li>
</ul>
<h3>Advanced Configuration</h3>
<h4>Timing Threshold Recommendations</h4>
<ul>
<li><strong>High Security Sites:</strong> 10-15 seconds (stricter protection)</li>
<li><strong>General Purpose Sites:</strong> 15-20 seconds (balanced protection)</li>
<li><strong>Accessibility-Focused Sites:</strong> 25-30 seconds (accommodates slower interaction)</li>
<li><strong>Reading-Heavy Sites:</strong> 30+ seconds (allows time for content review)</li>
</ul>
<h4>Admin Interface Customization</h4>
<ul>
<li><strong>Admin Bar Statistics</strong> – Toggle spam counter visibility in admin bar</li>
<li><strong>Screen Options</strong> – Control information panel display on comments page</li>
<li><strong>Dashboard Integration</strong> – Spam statistics in “At a Glance” widget</li>
<li><strong>Contextual Help</strong> – Comprehensive protection information in WordPress help system</li>
</ul>
<h4>Technical Requirements</h4>
<p><strong>Server Environment:</strong><br />
* WordPress 5.0 or higher<br />
* PHP 7.4 or higher<br />
* Standard WordPress hosting with wp_options table access</p>
<p><strong>Browser Support:</strong><br />
* All modern browsers (Chrome, Firefox, Safari, Edge)<br />
* Internet Explorer 11+ with graceful degradation<br />
* Mobile browsers with full functionality<br />
* JavaScript-disabled browsers with fallback protection</p>
<p><strong>Performance Specifications:</strong><br />
* JavaScript payload: ~2KB minified and compressed<br />
* Database impact: Single option row with minimal queries<br />
* Server processing: Sub-millisecond detection analysis<br />
* Memory usage: Negligible footprint during comment processing</p>


GhostTrap

Advanced 5-layer invisible spam protection for comments. No captcha, no user friction - professional spam blocking.

Arnan de Gans

<p>Tired of spam bots in your WordPress and ClassicPress website? Do you want to get rid of false registrations and other spammy nonsense? Don’t wan’t to use a clumsy and user-unfriendly Captcha? Don’t want to use a Captcha from Google or other big-tech company period?</p>
<p>Meet <strong>No-Bot Registration</strong>, easy to use, superior protection without making it hard for your visitors. Easily blacklist (partial) email addresses and domains so they can no longer register an account.</p>
<p>Create one or more questions and a set of possible answers for them and visitors have to answer your question when they register.<br />
If they answer wrong, they get denied their account.</p>
<p>Questions can be as simple as “1 + 1”, with possible answers being 1, one or uno. That way you can plan for eventualities and how people interpret your question.</p>
<h4>Features</h4>
<ul>
<li>Protect registration forms</li>
<li>Protect the WooCommerce checkout form if you let people register from there</li>
<li>Protect your blog comment form</li>
<li>Prevents comment spam, trackback spam and other nuisances with ease</li>
<li>Set up multiple security questions to further confuse bots</li>
<li>Blacklist any email, domain or tld you don’t like</li>
<li>Configurable notification messages for users failing the security tests</li>
</ul>


No-Bot Registration

Prevent bots from creating accounts by blacklisting domains and usernames and present people with a human friendly security question.

GhostTrap vs No-Bot Registration