Justin Parr

<h3>Update: 6/2015</h3>
<p>Changed e-mail token and math problem confirmation logic.  Previously, everything happened all at once, and the user would get prompted mutliple times for the math problem.<br />
Now, the user must answer the math problem first, before the e-mail token is sent.  Once the math problem is correctly answered within the session, it isn’t asked again.  The user must now enter the correct token, which results in successful registration.<br />
SPECIAL THANKS TO OLEG M. FOR HELPING ME IDENTIFY, FIX, AND TEST THE ERROR!!</p>
<h3>Update: 5/2015</h3>
<p>Added E-mail confirmation token.  Prevents registration until user enters a token sent via e-mail.</p>
<h3>Features:</h3>
<ul>
<li>Prevent users from registering, if their IP or e-mail address is listed in the “Comments” blacklist (Settings..Discussion)</li>
<li>E-mails user a 4-digit token, and requires the user to enter the token in order to register.</li>
<li>Users must solve a simple math problem (Add two one-digit numbers).</li>
<li>Places user IP address in “Website” field.</li>
</ul>
<p>This is a super-simple user registration spam countermeasure.  I searched for a plugin that was SIMPLE and EFFECTIVE.  I looked at quite a few plugins that promised the desired effect, but were either cumbersome, or included too many unneeded or unwanted features.  Likewise, there are some very simple plugins that are less-than-effective.</p>
<h3>This plugin is VERY simple:</h3>
<p>If the user’s IP or e-mail address is listed in the “Discussion” comments blacklist, it prevents the user from registering.  This functionality should really be built in to WordPress, so, you’re welcome.</p>
<p>When the user registers, they are presented with a simple math problem – adding a 3-digit number to a 1-digit number.  99% of the “user reg spam” is based on bots being able to attack the basic WordPress registration form.  By adding even a simple math problem, most bots will fail, removing your site as a target of opportunity.  Criminals go after what’s easy – if you make it slightly more difficult for them, they will go after someone else.</p>
<p>Once the user solves the math problem, they are sent a 4 digit token via e-mail, and must enter that token to continue registration.</p>
<p>Finally, knowing the location from where your users register allows you to more effectively evaluate and block the source.  This plugin adds the user’s IP address (at the time of registration)  to the “Website” field.</p>
<p>Go to http://whois.arin.net to find out who they are.  If you decide to block the IP,  add the IP address, part of the IP address, or e-mail domain to the “Discussion” comments blacklist, and ANY user registrations from an IP address matching that pattern will be blocked.</p>
<h3>Configuration</h3>
<h3>To Configure the Plugin:</h3>
<p>NOTE:  NO CONFIGURATION IS REQUIRED.  This plugin is fully-functional using the default values.</p>
<p>In the Plugins page, click “Settings” underneath the “JP User Registration Blacklist” plugin.</p>
<ul>
<li>
<p>Seed:  This value determines how the answer to the math problem is masked.  Periodically change this, to keep the spammers and criminals at bay.  The initial value is randomly-generated.</p>
</li>
<li>
<p>Failed Math Response:  Error message displayed to the user, if they fail to correctly solve the math problem.</p>
</li>
<li>
<p>Rejected IP or E-mail:  Error message displayed to the user, if their IP or e-mail is blocked.  Keep this simple and generic, to keep them from knowing why they are being blocked.</p>
</li>
<li>
<p>Form field name for math problem:  This field name contains the user’s answer to the math problem.  Periodically change this, to keep the bots away.  The initial value is randomly-generated.</p>
</li>
</ul>
<h3>To Block an IP address</h3>
<ol>
<li>In the WordPress Dashboard, go to “Settings…Discuss”</li>
<li>To block all or part of an IP address, add it on its own line to “Comments Blacklist”</li>
<li>To block all or part of an e-mail address, add it on its own line to “Comments Blacklist”</li>
<li>Click “Save”<br />
(For more details, see Examples)</li>
</ol>


JP User Registration Blacklist

Prevent User Registration Spam, and Track New User IP address

YoOhw Studio

B.Ng

<p><strong>Blacklist Manager</strong> is a WooCommerce blacklist, anti-fraud, and spam prevention plugin for stores that need to block fake orders, suspicious customers, spam registrations, and unwanted form submissions.</p>
<p>Use blacklist rules for <strong>phone numbers</strong>, <strong>email addresses</strong>, <strong>IP addresses</strong>, and <strong>email domains</strong> at WooCommerce checkout, registration, comments, product reviews, REST API orders, and supported WordPress forms. Built-in checkout email verification and phone verification can also challenge risky customers before an order is accepted.</p>
<p>The plugin works with WooCommerce Classic Checkout, WooCommerce Checkout Blocks, Contact Form 7, Gravity Forms, and WPForms.</p>
<p><a href="https://yoohw.com/product/blacklist-manager-premium/" rel="nofollow ugc">Premium version</a> | <a href="https://yoohw.com/global-blacklist-plan/" rel="nofollow ugc">Global Blacklist</a> | <a href="https://yoohw.com/docs/category/woocommerce-blacklist-manager/" rel="nofollow ugc">Documentation</a> | <a href="https://yoohw.com/support/" rel="nofollow ugc">Support</a> | <a href="https://sandbox.yoohw.com/demo/yobm_demo.html" rel="nofollow ugc">Demo</a></p>
<h3>Key Features</h3>
<ul>
<li><strong>WooCommerce checkout protection</strong>: Block or review orders using phone, email, IP address, and email domain rules.</li>
<li><strong>Suspect and blocked lists</strong>: Review risky identities before moving confirmed abuse to the blocklist.</li>
<li><strong>Fast blacklist management</strong>: Add entries from the dashboard or directly from the WooCommerce order screen.</li>
<li><strong>Registration protection</strong>: Stop signups that match blocked emails, IP addresses, or email domains.</li>
<li><strong>Comment and review blocking</strong>: Prevent comments and product reviews from blacklisted emails.</li>
<li><strong>Form spam protection</strong>: Check Contact Form 7, Gravity Forms, and WPForms submissions against blacklist data.</li>
<li><strong>Checkout email verification</strong>: Require a verification code before allowing checkout to continue.</li>
<li><strong>Checkout phone verification</strong>: Require an SMS verification code for phone-based checkout validation.</li>
<li><strong>WooCommerce REST API protection</strong>: Block blacklisted identities from creating orders through external apps or integrations.</li>
<li><strong>Custom notices and alerts</strong>: Customize customer-facing block messages and admin email alerts.</li>
<li><strong>Dashboard stats</strong>: Review blacklist entries and detection attempts from the admin area.</li>
</ul>
<h3>Checkout Compatibility</h3>
<p>Blacklist Manager supports WooCommerce Classic Checkout, <a href="https://woocommerce.com/checkout-blocks/" rel="nofollow ugc">WooCommerce Checkout Blocks</a>, and many third-party checkout plugins that use standard WooCommerce checkout and order creation flows.</p>
<h3>Global Blacklist Decisions</h3>
<p>Blacklist Manager can connect your store to <strong>Global Blacklist Decisions</strong>, a fraud-prevention service that checks order identities such as email, phone, IP address, address, and email domain against broader risk data.</p>
<p><a href="https://yoohw.com/global-blacklist-plan/" rel="nofollow ugc">Learn more about Global Blacklist Decisions</a></p>
<h3>Premium Features</h3>
<p>Blacklist Manager Premium adds deeper fraud review and automation for stores that need more than manual blacklist rules:</p>
<ul>
<li>Risk scoring for blacklist, identity, IP, address, payment, device, and order pattern signals.</li>
<li>Automation rules to auto-suspect, auto-block, or auto-review orders.</li>
<li>Payment intelligence for Stripe, PayPal, Mollie, Braintree, WooPayments, AVS, card country, and payer mismatch signals.</li>
<li>Device identity checks to link repeat abuse across emails, phones, IPs, addresses, and accounts.</li>
<li>Advanced blocking for customer name, address, device, disposable email, disposable phone, country, VPN, and proxy signals.</li>
<li>Activity logs, import/export, cleanup tools, permissions, multi-store sync, CAPTCHA, SMS, IP intelligence, geocoding, and email validation integrations.</li>
</ul>
<p><a href="https://yoohw.com/product/blacklist-manager-premium/" rel="nofollow ugc">Explore Premium</a></p>
<h3>Supported Plugins and Integrations</h3>
<h4>Supported plugins</h4>
<ul>
<li><a href="https://wordpress.org/plugins/woocommerce/" rel="ugc">WooCommerce</a></li>
<li><a href="https://wordpress.org/plugins/contact-form-7/" rel="ugc">Contact Form 7</a></li>
<li><a href="https://www.gravityforms.com/" rel="nofollow ugc">Gravity Forms</a></li>
<li><a href="https://wordpress.org/plugins/wpforms-lite/" rel="ugc">WPForms</a></li>
</ul>
<h4>Premium integrations</h4>
<ul>
<li>WooCommerce Stripe Gateway, Payment Plugins for Stripe WooCommerce, WooCommerce PayPal Payments, Payment Plugins for PayPal WooCommerce, Braintree for WooCommerce, Mollie Payments for WooCommerce, and WooPayments.</li>
<li>Cloudflare, reCAPTCHA v3/v2, hCaptcha, IP-api, BigDataCloud, ZeroBounce, NumCheckr, Google Maps, Yo Credits, Twilio, and Textmagic.</li>
</ul>
<h3>Use Cases</h3>
<ul>
<li>Block fake WooCommerce orders before payment review.</li>
<li>Prevent repeat abuse from known phone numbers, email addresses, IP addresses, and domains.</li>
<li>Reduce spam registrations, comments, product reviews, and form submissions.</li>
<li>Require email or phone verification during checkout.</li>
<li>Review suspicious customers before moving them to the blocklist.</li>
<li>Use Global Blacklist Decisions as an additional fraud signal.</li>
</ul>


Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification

Block risky WooCommerce orders, spam signups, and form submissions with blacklist rules plus checkout email and phone verification.

JP User Registration Blacklist vs Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification