seconet

MioGuard for Contact Form 7 is a lightweight and easy-to-use plugin that protects Contact Form 7 forms from spam and bot submissions using an IP-based rate limit and a customizable honeypot field.
This plugin is not affiliated with or endorsed by the Contact Form 7 team.
Key features: 
– Rate-limit form submissions by IP (configurable from the admin panel; default 5 minutes) 
– Customizable honeypot field to catch bots 
– Optional “Protected by CF7 Simple Guard” badge 
– Fully localized (English + Italian included) 
– No extra database tables, uses WordPress transients with automatic expiration 
– Works with Contact Form 7 forms using Gutenberg or Classic editor 
– Compatible with WordPress 6.0+ and PHP 7.4+
How it works: 
– The plugin blocks repeat submissions from the same IP within the configured interval. 
– The honeypot field prevents automated bots from sending forms. 
– Optionally, you can show a small badge at the end of the form to indicate protection.
Localization 
– English (<code>en_US</code>) and Italian (<code>it_IT</code>) included. 
– Other languages can be added via <code>.po</code> / <code>.mo</code> files in <code>/languages</code>.

MioGuard for Contact Form 7

Spam and bot protection for Contact Form 7 forms with honeypot and rate limiting.

ahriad

Turbo Rate Limiter is a powerful yet easy-to-use security plugin that helps protect your WordPress site from various types of abuse by limiting the rate at which visitors can make requests.
<h3>Features</h3>
<ul>
<li>URI-based filtering – Set rate limits for specific URLs, paths, or patterns</li>
<li>Multiple match types – Exact match, contains, starts with, ends with, or regex</li>
<li>Flexible time windows – Configure rate limits per second, minute, or hour</li>
<li>Multiple actions – Return HTTP 429, redirect to URL, or redirect to page</li>
<li>Test mode – Preview rate limiting behavior without blocking visitors</li>
<li>Debug panel – Visual debug panel for administrators</li>
<li>Cloudflare support – Full IPv4 and IPv6 proxy detection</li>
<li>Localization ready – Translations available for multiple languages</li>
</ul>
<h3>Use Cases</h3>
<ul>
<li>API protection – Limit API calls to prevent abuse</li>
<li>Login protection – Prevent brute force attacks on login pages</li>
<li>Form spam prevention – Limit form submission rates</li>
<li>Resource protection – Protect heavy database queries</li>
<li>CDN compatibility – Works with Cloudflare and other proxies</li>
</ul>
<h3>Arbitrary section</h3>
<h3>Developer API</h3>
Turbo Rate Limiter provides hooks and filters for developers:
<pre><code>// Add trusted proxy IPs
add_filter('turbo_rate_limiter_trusted_proxies', function() {
 return [
 '173.245.48.0/20',
 '2400:cb00::/32',
 // More ranges...
 ];
});

// Access rate limiter instance
$rate_limiter = TURBORL_Rate_Limiter::get_instance();
</code></pre>
For full API documentation, see docs/developer-api.md.

Turbo Rate Limiter

Protect your WordPress site from brute force attacks, API abuse, and DDoS attacks with customizable rate limiting rules.

MioGuard for Contact Form 7 vs Turbo Rate Limiter