LaughterOnWater

GhostTrap provides sophisticated invisible spam protection using a comprehensive 5-layer detection system. Legitimate users comment normally while automated spam is silently blocked through advanced timing analysis, cryptographic validation, and behavioral detection.
<h4>5-Layer Protection System</h4>
<ul>
<li>Timing Analysis – Detects submissions too fast for human interaction</li>
<li>Cryptographic Signatures – Prevents replay attacks and form manipulation</li>
<li>Year Validation – JavaScript-enhanced field verification</li>
<li>JavaScript Detection – Ensures legitimate browser interaction</li>
<li>Honeypot Fields – Multiple hidden traps catch automated bots</li>
</ul>
<h4>Professional Features</h4>
<ul>
<li>Enhanced Admin Interface – Professional statistics dashboard with custom branding</li>
<li>Real-time Statistics – Track protection effectiveness with detailed blocking metrics</li>
<li>Configurable Timing – Adjust detection sensitivity from 5-300 seconds</li>
<li>WordPress 6.4+ Compatible – Full support for block themes and FSE</li>
<li>Admin Bar Integration – Quick spam statistics for administrators</li>
<li>Screen Options Control – User-configurable interface elements</li>
</ul>
<h4>Zero User Friction</h4>
All protection operates invisibly – no captcha, no puzzles, no delays. Users with JavaScript enabled see normal comment forms, while those with disabled JavaScript get simple year validation. Protection effectiveness remains high in both scenarios.
<h4>Performance Optimized</h4>
<ul>
<li>Lightweight JavaScript – Only 2KB, loads exclusively on comment pages</li>
<li>Smart Script Loading – Conditional loading based on comment form presence</li>
<li>Minimal Database Impact – Efficient storage with optional spam archiving</li>
<li>Browser Compatibility – Works across all modern browsers with graceful degradation</li>
</ul>
<h4>GDPR Compliant</h4>
No external services, no tracking, no personal data collection beyond standard WordPress comment processing. All spam detection happens locally on your server.
<h4>Attribution</h4>
Built upon the original Anti-spam plugin foundation by webvitaly, with comprehensive modernization, enhanced detection layers, and professional admin interface for current WordPress compatibility.
<h3>Privacy Policy</h3>
GhostTrap operates with privacy-first design principles:
<ul>
<li>No External Services – All spam detection processing occurs on your server</li>
<li>No Personal Data Collection – Uses only standard WordPress comment data for protection</li>
<li>No Tracking or Analytics – Zero data sharing with third parties or external systems</li>
<li>GDPR Fully Compliant – Minimal data processing with transparent, local-only operation</li>
<li>Optional Spam Storage – Blocked comments stored locally only if explicitly enabled</li>
</ul>
<h3>Advanced Configuration</h3>
<h4>Timing Threshold Recommendations</h4>
<ul>
<li>High Security Sites: 10-15 seconds (stricter protection)</li>
<li>General Purpose Sites: 15-20 seconds (balanced protection)</li>
<li>Accessibility-Focused Sites: 25-30 seconds (accommodates slower interaction)</li>
<li>Reading-Heavy Sites: 30+ seconds (allows time for content review)</li>
</ul>
<h4>Admin Interface Customization</h4>
<ul>
<li>Admin Bar Statistics – Toggle spam counter visibility in admin bar</li>
<li>Screen Options – Control information panel display on comments page</li>
<li>Dashboard Integration – Spam statistics in “At a Glance” widget</li>
<li>Contextual Help – Comprehensive protection information in WordPress help system</li>
</ul>
<h4>Technical Requirements</h4>
Server Environment: 
* WordPress 5.0 or higher 
* PHP 7.4 or higher 
* Standard WordPress hosting with wp_options table access
Browser Support: 
* All modern browsers (Chrome, Firefox, Safari, Edge) 
* Internet Explorer 11+ with graceful degradation 
* Mobile browsers with full functionality 
* JavaScript-disabled browsers with fallback protection
Performance Specifications: 
* JavaScript payload: ~2KB minified and compressed 
* Database impact: Single option row with minimal queries 
* Server processing: Sub-millisecond detection analysis 
* Memory usage: Negligible footprint during comment processing

GhostTrap

Advanced 5-layer invisible spam protection for comments. No captcha, no user friction - professional spam blocking.

Protect Uploads

The uploads directory is where the files of the WordPress library are stored. Unfortunelty, this directory is not protected. A person who wants to see all your library could list it instantly going to : http://yourwebsite/wp-content/uploads . This plugin will hide the content by adding an index.php file on the root of your uploads directory or by setting an htaccess which will return a 403 error (Forbidden Access).
<ul>
<li>Depending on your server setting, the htaccess option could be disabled.</li>
</ul>
New in Version 0.7.0:
<ul>
<li>Site Health checks: See at a glance — under Tools → Site Health — whether your uploads directory is protected from browsing, what server you are running, and whether any risky file types are sitting in your uploads folder.</li>
<li>WordPress 7.0 ready: Fully tested on WordPress 7.0 and PHP 8.3.</li>
</ul>
All features:
<ul>
<li>Directory Protection: Stop visitors from browsing your uploads directory (index.php or .htaccess 403).</li>
<li>Image Watermarking: Add text watermarks to your uploaded images with customizable position, opacity, and font size.</li>
<li>Right-Click Protection: Prevent users from right-clicking to download or save your images.</li>
<li>Password Protection: Secure individual media files with passwords. Multiple passwords can be set for each file with custom labels.</li>
<li>Access Logging: Track who accesses your password-protected files with detailed logs including IP address and user agent.</li>
<li>Site Health Checks: Built-in protection status tests with actionable advice.</li>
</ul>
Need more protection? <a href="https://protectuploads.com" rel="nofollow ugc">Protect Uploads Pro</a> adds image watermarks with bulk operations, expiring download links, role-based access with server-level enforcement, hotlink protection, download analytics, and a Protected Download block.
Available languages:
<ul>
<li>English</li>
<li>Français</li>
<li>Español</li>
<li>Italian (thanks to Marko97)</li>
</ul>

Do not download. The plugin has been changed not too long ago and it now infects your wordpress installation, and possible spreads itself to other sites if you are on shared hosting.

It's a virus

Protect your uploads directory. Prevent browsing, add watermarks, disable right-click, and password-protect files. For more information, visit protect …

GhostTrap vs Protect Uploads