Plugin Brewery

<p>Multi-Form Anti-Spam Image CAPTCHA adds a fast, accessible icon challenge — paired with honeypots and a submission speed check — to the form plugins and WordPress core screens spambots love to abuse. Users select the requested icon to verify; every challenge is generated server-side with a hashed answer so bots cannot scrape the correct option from the markup.</p>
<p>One plugin covers Gravity Forms, Contact Form 7, WPForms, WooCommerce, WordPress login, comments, and more — with full styling controls, 780+ icons, and layered bot defenses.</p>
<h4>Integrations</h4>
<ul>
<li>Gravity Forms — drag the <strong>MultiForm Image CAPTCHA</strong> field into any form</li>
<li>Contact Form 7 — insert the <code>[pbmfasic]</code> form-tag (a one-click tag generator is included)</li>
<li>WPForms — drag the <strong>MultiForm Anti-Spam Image CAPTCHA</strong> field into any form</li>
<li>Formidable Forms — drop <code>[pbmfasic]</code> inside an HTML field</li>
<li>Elementor Pro Forms — drop <code>[pbmfasic]</code> inside an HTML widget</li>
<li>WooCommerce — toggle CAPTCHA on the Login, Registration, and classic shortcode Checkout forms (the block-based Checkout Block is not yet supported)</li>
<li>WordPress login, registration, lost-password and reset-password forms</li>
<li>WordPress comments</li>
</ul>
<h4>Spam protection</h4>
<ul>
<li>Hashed, server-side icon challenge with per-render tamper tokens</li>
<li>Honeypot fields plus a reverse-honeypot trap that catches bots that auto-fill every field</li>
<li>Submission-speed check rejects bot-fast submissions</li>
<li>Daily cleanup of stale CAPTCHA records</li>
<li>Optional “disable for logged-in users” toggle</li>
</ul>
<h4>Styling and icons</h4>
<ul>
<li>Switch between Font Awesome icon fonts (bundled) and 780+ bundled SVG icons</li>
<li>Full styling controls: colors, borders, padding, font size, layout, alignment</li>
<li>Custom prompt text and custom error messages</li>
<li>Toggle mode hides the CAPTCHA until the user starts interacting with the form</li>
</ul>
<h4>Accessibility</h4>
<ul>
<li>Keyboard-navigable radio buttons with ARIA labels</li>
<li>Optional audio cues for screen-reader users (off by default; opt in on the General tab if you need an audio alternative)</li>
</ul>
<h4>Privacy</h4>
<p>The plugin does not call any external services and does not send data off your site. CAPTCHA records are stored in a custom table on your own database and purged automatically every 24 hours.</p>
<h4>Developer hooks</h4>
<ul>
<li><code>pbmfasic_skip_wp_login_option</code> — filter whether validation runs on WordPress login, registration, lost-password and reset-password forms</li>
<li><code>pbmfasic_skip_validation</code> — filter whether validation should be skipped for the current request</li>
<li><code>pbmfasic_force_synchronous_render</code> — return true to render the CAPTCHA inline instead of lazy-loading it via AJAX, useful when a form submits over a custom AJAX flow that needs the CAPTCHA fields present at first paint</li>
</ul>
<h3>Credits</h3>
<p>This plugin bundles the following third-party assets, all under licenses compatible with the GPL v3:</p>
<ul>
<li><strong>Font Awesome 4.7.0</strong> — http://fontawesome.io — Font: SIL OFL 1.1, CSS: MIT License. Files: <code>css/fontawesome.css</code>, <code>fonts/fontawesome-webfont.*</code>, <code>fonts/FontAwesome.otf</code>.</li>
<li><strong>Font Awesome SVG icons</strong> (<code>svgs/</code>) — derived from the Font Awesome 4.7 free icon set — License: CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/).</li>
<li><strong>Audio: “Failure 01”</strong> by rhodesmas — https://freesound.org/s/342756/ — License: CC BY 4.0. Used as <code>audio/wrong.mp3</code> (trimmed).</li>
<li><strong>Audio: “Success 04”</strong> by rhodesmas — https://freesound.org/s/322929/ — License: CC BY 4.0. Used as <code>audio/correct.mp3</code> (trimmed).</li>
</ul>
<p>The plugin source code is distributed under the GNU GPL v3 (see <code>LICENSE</code>).</p>


Multi-Form Anti-Spam Image CAPTCHA

Image CAPTCHA, honeypot and accessibility spam blocking for Gravity Forms, CF7, WPForms, Formidable, Elementor, WooCommerce, comments, and login.

CompleteWebResources

<p>Change the default WordPress comment blocklist functionality to exact match and save entries marked as spam for review.</p>
<p>The WordPress comment blocklist inside matches keywords, so for example, blocklisting a word such as “pasta” will automatically delete comments containing “pastaroni” or “anitpasta” (but not “chef boyardee”).</p>
<p>If you try to use the WordPress comment blocklist for contact form entries, this can be hugely problematic. The first major issue is falsely identifying comments as spam so you risk blocking valid contact form entries.</p>
<p>Additionally, there’s no moderation queue built into Formidable Forms, Contact Form 7, or Gravity Forms for entries marked as spam. This plugin fixes those issues.</p>
<h4>Changing the default WordPress comment blocklist functionality</h4>
<p>This plugin changes the default inside match blocklist functionality to exact match keywords, URLs, and ip addresses. If you add “karaoke” to your blocklist you’ll only be blocking “karaoke” and not “karaoke stars.”</p>
<h4>Retaining Contact Form Entries</h4>
<p>The plugin also retains contact form entries marked as spam in your database, so you can check them from the WordPress admin area.</p>
<h4>Important Notes / FAQ</h4>
<ul>
<li>For default comments in a post after submitting, if blocklisted, the comment will go to Spam status, whereas the default functionality would be to send that comment to the trash.</li>
<li>We’re currently configured to work with Contact Form 7, Formidable Forms and Gravity Forms.</li>
<li>Add keywords you want to block to the WordPress admin area under <strong>Settings > Discussion > Disallowed Comment Keys</strong></li>
<li>Upon activation, the plugin will automatically populate three keywords by default in the “Disallowed Comment Keys” field in the WP Admin area. This is so you know things are working. We leave it to the user to control their specific blocklist keywords. If you want a list of we’ll known spam words as a starting point, check your preferred search engine for “ultimate comment blocklist” or “WordPress comment blocklist.”</li>
<li><strong>CAUTION:</strong> Even though this is a significantly less blunt approach than the default WordPress functionality, please be careful. If you add the word “appointment” to your blocklist, you will block any form fill with the word “appointment” from getting through to your inbox.</li>
</ul>
<h4>Support the Plugin</h4>
<p>If you love this plugin and want to support it, you can help us by linking to this page, leaving constructive feedback, or sending a monetary donation <a href="https://paypal.me/completewebresources" rel="nofollow ugc">paypal.me/completewebresources</a>.</p>


Exact Match Disallowed Comment & Contact Forms

Change the default WordPress comment blocklist functionality to exact match and save entries marked as spam for review.

Multi-Form Anti-Spam Image CAPTCHA vs Exact Match Disallowed Comment & Contact Forms