LukaCodes

<p><strong>AntiSpam Shield by LukaCodes</strong> is a lightweight, no-bloat plugin that protects your WordPress comment section <strong>and contact forms</strong> from spam. Six independent tools, one settings page. <a href="https://lukacodes.com/comment-shield-docs/" rel="nofollow ugc">Read the full documentation</a>.</p>
<ul>
<li><strong>Disable Website Field</strong> — Removes the URL/website field from the comment form. Works with all themes, including those that hardcode the field (CSS fallback included).</li>
<li><strong>Strip Links from Comments</strong> — Automatically removes all <code><a href></code> hyperlinks from comment content — both on display and before saving to the database. Spammers get zero benefit from posting links.</li>
<li><strong>reCAPTCHA v3</strong> — Adds Google’s invisible bot-score protection. No checkbox, no puzzle, no friction for real users. Bots are silently blocked server-side.</li>
<li><strong>Cloudflare Turnstile</strong> — A privacy-friendly CAPTCHA alternative. Mutually exclusive with reCAPTCHA v3 — enabling one automatically disables the other.</li>
<li><strong>Login Shield</strong> — Adds CAPTCHA to the WordPress login form (<code>wp-login.php</code>). Stops brute-force bots silently.</li>
<li><strong>Registration Shield</strong> — Adds CAPTCHA to the WordPress registration form. Blocks bot account creation.</li>
<li><strong>WPForms Integration</strong> — Apply the same CAPTCHA protection to WPForms Lite — using the same keys you already configured, no extra setup.</li>
<li><strong>Easy Contact Form by LukaCodes Integration</strong> — Apply the same CAPTCHA protection to forms created with the companion Easy Contact Form plugin.</li>
</ul>
<p>All features are <strong>independent</strong> — enable only what you need.</p>
<h4>Login & Registration Shield</h4>
<p>Version 1.1.2 adds CAPTCHA protection to <code>wp-login.php</code>:</p>
<ul>
<li><strong>Login Shield</strong> — Hooks into <code>wp_authenticate_user</code> for server-side verification after credentials are checked. Returns a <code>WP_Error</code> if CAPTCHA fails — WordPress displays it as a normal login error.</li>
<li><strong>Registration Shield</strong> — Hooks into <code>registration_errors</code> to add CAPTCHA validation during registration. Works alongside all other WordPress registration validations.</li>
</ul>
<p>Both are independently togglable in the settings panel. Admins already logged in are never affected.</p>
<h4>WPForms Integration</h4>
<p>Version 1.1.0 introduces CAPTCHA protection for <strong>WPForms Lite</strong>:</p>
<ul>
<li>Hooks into <code>wpforms_display_submit_before</code> to inject the CAPTCHA widget before the submit button.</li>
<li>Hooks into <code>wpforms_process</code> for server-side token verification.</li>
<li>Works with both reCAPTCHA v3 (invisible) and Cloudflare Turnstile (visible widget).</li>
</ul>
<p>Note: WPForms Pro includes its own native CAPTCHA integration — this feature is intended for <strong>WPForms Lite</strong> users only.</p>
<h4>Easy Contact Form by LukaCodes Integration</h4>
<p>Version 1.1.4 adds CAPTCHA protection for forms created with <a href="https://wordpress.org/plugins/lukacodes-easy-contact-form/" rel="ugc">Easy Contact Form by LukaCodes</a>:</p>
<ul>
<li>Injects the CAPTCHA widget (Turnstile) or invisible token (reCAPTCHA v3) into every Easy Contact Form on the page.</li>
<li>Hooks into Easy Contact Form’s <code>lukacodes_comment_shield_check</code> filter for server-side token verification before the submission is processed or emails are sent.</li>
<li>Uses the same CAPTCHA keys you already configured — no extra setup.</li>
<li>When a token fails, the user sees a CAPTCHA-specific error message inline; the submission is never stored or emailed.</li>
</ul>
<h4>Why AntiSpam Shield?</h4>
<p>Most anti-spam plugins are heavy, require accounts, or add ugly CAPTCHAs. AntiSpam Shield by LukaCodes is different:</p>
<ul>
<li>~30 KB total — no external libraries, no jQuery dependency</li>
<li>Settings page with <strong>live key testing</strong> — verify your reCAPTCHA or Turnstile keys before enabling</li>
<li><strong>Link stripping preview</strong> — paste any comment text and see exactly what gets removed</li>
<li>Graceful fallback: if Google’s or Cloudflare’s API is unreachable, comments are held for moderation (never lost)</li>
<li>Trusted users (administrators) bypass CAPTCHA checks automatically</li>
<li><strong>Mutual exclusion</strong>: reCAPTCHA v3 and Cloudflare Turnstile cannot be active at the same time</li>
<li>WP Coding Standards compliant — fully escaped output, nonce-protected AJAX</li>
</ul>
<h4>reCAPTCHA v3 — How it works</h4>
<p>When a visitor submits a form, JavaScript silently requests a score token from Google. The token is sent with the submission and verified server-side against your minimum score threshold (configurable from 0.1 to 1.0). No user interaction required.</p>
<h4>Cloudflare Turnstile — How it works</h4>
<p>A Turnstile widget is rendered inside the form. When the visitor completes the challenge, a token is submitted and verified server-side against the Cloudflare API.</p>
<h3>Third-Party Services</h3>
<p>This plugin optionally uses the following third-party services:</p>
<h4>Google reCAPTCHA v3</h4>
<p>A service provided by Google LLC.</p>
<ul>
<li><strong>What it does:</strong> Detects bots and spam on your comment form and contact forms without user interaction.</li>
<li><strong>When data is sent:</strong> Only when reCAPTCHA v3 is enabled. A token is sent to <code>https://www.google.com/recaptcha/api/siteverify</code> on each form submission.</li>
<li><strong>What data is sent:</strong> The visitor’s IP address and a reCAPTCHA token.</li>
<li><strong>Google Privacy Policy:</strong> https://policies.google.com/privacy</li>
<li><strong>Google Terms of Service:</strong> https://policies.google.com/terms</li>
</ul>
<h4>Cloudflare Turnstile</h4>
<p>A service provided by Cloudflare, Inc.</p>
<ul>
<li><strong>What it does:</strong> Presents a privacy-friendly CAPTCHA widget on comment and contact forms.</li>
<li><strong>When data is sent:</strong> Only when Cloudflare Turnstile is enabled. A token is sent to <code>https://challenges.cloudflare.com/turnstile/v0/siteverify</code> on each form submission.</li>
<li><strong>What data is sent:</strong> The visitor’s IP address and a Turnstile token.</li>
<li><strong>Cloudflare Privacy Policy:</strong> https://www.cloudflare.com/privacypolicy/</li>
<li><strong>Cloudflare Terms of Service:</strong> https://www.cloudflare.com/website-terms/</li>
</ul>
<p>Both services are entirely optional. If you do not enter API keys or enable either CAPTCHA, no data is sent to any third party.</p>


AntiSpam Shield by LukaCodes

Block comment spam, brute-force logins and bot registrations with reCAPTCHA v3 or Cloudflare Turnstile. Lightweight, no bloat.

R.Sabbir

<p>Stop contact form spam instantly with <strong>BotShield CAPTCHA for Contact Form 7</strong>. This all-in-one spam protection plugin integrates <strong>Google reCAPTCHA (v2 Checkbox & v3 Invisible)</strong>, <strong>Cloudflare Turnstile</strong> (Privacy-Focused), and lightweight <strong>Built-in Arithmetic/Image Challenges</strong> to block bots while letting real users pass.</p>
<p>Whether you need strict security or a friction-free user experience, BotShield gives you complete control over your specific form protection needs. No more spam submissions, fake leads, or automated bot attacks.</p>
<p><strong>Protect Your WooCommerce Store with Enterprise-Grade Security.</strong> Upgrade to <strong><a href="https://woocommerce.com/products/securegate-captcha/" rel="nofollow ugc">SecureGate CAPTCHA</a></strong> for ultimate full-site protection. Instantly block spam, fake registrations, and checkout fraud using intelligent Cloudflare Turnstile, Google reCAPTCHA, hCaptcha, and powerful Geo-Blocking rules—keeping your store fast, secure, and entirely bot-free.</p>
<h4>Key Features & Benefits</h4>
<ul>
<li><strong>Multi-Provider Support</strong>: Choose between Google reCAPTCHA, Cloudflare Turnstile, or Self-hosted challenges.</li>
<li><strong>Google reCAPTCHA Integration</strong>: Supports both <strong>v2 (“I’m not a robot”)</strong> and <strong>v3 (Invisible)</strong> keys.</li>
<li><strong>Cloudflare Turnstile</strong>: The modern, privacy-friendly alternative that stops bots without annoying puzzles.</li>
<li><strong>Lightweight Built-in Protection</strong>: Use simple Math or Image CAPTCHAs without needing any external API keys.</li>
<li><strong>Seamless Contact Form 7 Integration</strong>: Adds a dedicated “BotShield” tag generator button directly to the CF7 editor.</li>
<li><strong>Mobile Optimized</strong>: Fully responsive challenges that work perfectly on smartphones and tablets.</li>
<li><strong>GDPR Compliant Options</strong>: Turnstile and Built-in modes offer excellent privacy compliance.</li>
<li><strong>Accessibility Ready</strong>: WCAG 2.1 compliant designs for screen reader support.</li>
</ul>
<h4>Flexible Protection Options</h4>
<p><strong>1. Google reCAPTCHA (The Industry Standard)</strong><br />
*   <strong>v2 Checkbox</strong>: The classic “I’m not a robot” checkbox users trust.<br />
*   <strong>v3 Invisible</strong>: valid users are verified in the background with zero interaction.</p>
<p><strong>2. Cloudflare Turnstile (Privacy-First)</strong><br />
*   Verify visitors without solving complex puzzles. Smart, fast, and respectful of user privacy.</p>
<p><strong>3. Built-in Challenges (No Keys Required)</strong><br />
*   <strong>Arithmetic</strong>: Simple math questions (e.g., 7 + 2 = ?) effective against basic bots.<br />
*   <strong>Alphanumeric</strong>: Distorted text images for traditional verification.<br />
*   <em>Zero external dependency, 100% self-hosted.</em></p>
<h4>Perfect For</h4>
<ul>
<li>Contact forms</li>
<li>Registration forms</li>
<li>Quote request forms</li>
<li>Newsletter signups</li>
<li>Any Contact Form 7 form needing spam protection</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.0 or higher</li>
<li>Contact Form 7 plugin (must be active)</li>
<li>PHP 7.4 or higher</li>
<li>GD PHP extension for image CAPTCHAs</li>
</ul>
<h3>Privacy Policy</h3>
<p>BotShield CAPTCHA does not:<br />
* Collect any personal data<br />
* Store user information<br />
* Transmit data to external servers<br />
* Use cookies or tracking<br />
* Share information with third parties</p>
<p>All CAPTCHA processing happens locally on your WordPress server. The plugin is fully GDPR compliant.</p>
<h3>Support & Documentation</h3>
<ul>
<li>Support Forum: https://wordpress.org/support/plugin/botshield-captcha/</li>
<li>Developer Website: https://www.rsabbir.com/</li>
</ul>
<h3>Contributing</h3>
<p>Contributions are welcome! Contact the developer or visit the GitHub repository to contribute to this plugin’s development.</p>
<h3>Credits</h3>
<ul>
<li>Developed by R. Sabbir (https://www.rsabbir.com/)</li>
<li>Tested with Contact Form 7 6.1.4 and later</li>
</ul>
<h3>Technical Specifications</h3>
<h4>Server Requirements</h4>
<ul>
<li>WordPress 5.0 or higher</li>
<li>PHP 7.4 or higher</li>
<li>Contact Form 7 plugin (active)</li>
<li>GD PHP extension (for image CAPTCHAs)</li>
</ul>
<h4>Browser Support</h4>
<ul>
<li>Chrome (latest versions)</li>
<li>Firefox (latest versions)</li>
<li>Safari (latest versions)</li>
<li>Microsoft Edge (latest versions)</li>
<li>Mobile browsers (iOS Safari, Chrome Mobile)</li>
</ul>
<h4>Security Features</h4>
<ul>
<li>Token-based validation system</li>
<li>HMAC-SHA256 signature verification</li>
<li>Automatic token expiration (5 minutes)</li>
<li>XSS protection</li>
<li>CSRF token protection</li>
<li>No session storage required</li>
</ul>
<h4>Performance</h4>
<ul>
<li>Code: ~50KB total size</li>
<li>Assets: Minified and optimized</li>
<li>Loading: Conditional asset loading on relevant pages</li>
<li>HTTP Requests: Zero external requests</li>
<li>Caching: Compatible with all major WordPress cache plugins</li>
</ul>


BotShield CAPTCHA for Contact Form 7


shows warning here after installation. 



Warning: Undefined array key "answer" in C:\xampp\htdocs\mc2\wp-content\plugins\botshield-captcha\includes\class-botshield-captcha-field.php on line 298



Warning: Undefined array key "hash" in C:\xampp\htdocs\mc2\wp-content\plugins\botshield-captcha\includes\class-botshield-captcha-field.php on line 299






quality code not added

BotShield CAPTCHA for Contact Form 7 – Advanced Spam Protection with Turnstile, reCAPTCHA, Arithmetic, and Alphanumeric.

AntiSpam Shield by LukaCodes vs BotShield CAPTCHA for Contact Form 7