Plugin Brewery

<p>Multi-Form Anti-Spam Image CAPTCHA adds a fast, accessible icon challenge — paired with honeypots and a submission speed check — to the form plugins and WordPress core screens spambots love to abuse. Users select the requested icon to verify; every challenge is generated server-side with a hashed answer so bots cannot scrape the correct option from the markup.</p>
<p>One plugin covers Gravity Forms, Contact Form 7, WPForms, WooCommerce, WordPress login, comments, and more — with full styling controls, 780+ icons, and layered bot defenses.</p>
<h4>Integrations</h4>
<ul>
<li>Gravity Forms — drag the <strong>MultiForm Image CAPTCHA</strong> field into any form</li>
<li>Contact Form 7 — insert the <code>[pbmfasic]</code> form-tag (a one-click tag generator is included)</li>
<li>WPForms — drag the <strong>MultiForm Anti-Spam Image CAPTCHA</strong> field into any form</li>
<li>Formidable Forms — drop <code>[pbmfasic]</code> inside an HTML field</li>
<li>Elementor Pro Forms — drop <code>[pbmfasic]</code> inside an HTML widget</li>
<li>WooCommerce — toggle CAPTCHA on the Login, Registration, and classic shortcode Checkout forms (the block-based Checkout Block is not yet supported)</li>
<li>WordPress login, registration, lost-password and reset-password forms</li>
<li>WordPress comments</li>
</ul>
<h4>Spam protection</h4>
<ul>
<li>Hashed, server-side icon challenge with per-render tamper tokens</li>
<li>Honeypot fields plus a reverse-honeypot trap that catches bots that auto-fill every field</li>
<li>Submission-speed check rejects bot-fast submissions</li>
<li>Daily cleanup of stale CAPTCHA records</li>
<li>Optional “disable for logged-in users” toggle</li>
</ul>
<h4>Styling and icons</h4>
<ul>
<li>Switch between Font Awesome icon fonts (bundled) and 780+ bundled SVG icons</li>
<li>Full styling controls: colors, borders, padding, font size, layout, alignment</li>
<li>Custom prompt text and custom error messages</li>
<li>Toggle mode hides the CAPTCHA until the user starts interacting with the form</li>
</ul>
<h4>Accessibility</h4>
<ul>
<li>Keyboard-navigable radio buttons with ARIA labels</li>
<li>Optional audio cues for screen-reader users (off by default; opt in on the General tab if you need an audio alternative)</li>
</ul>
<h4>Privacy</h4>
<p>The plugin does not call any external services and does not send data off your site. CAPTCHA records are stored in a custom table on your own database and purged automatically every 24 hours.</p>
<h4>Developer hooks</h4>
<ul>
<li><code>pbmfasic_skip_wp_login_option</code> — filter whether validation runs on WordPress login, registration, lost-password and reset-password forms</li>
<li><code>pbmfasic_skip_validation</code> — filter whether validation should be skipped for the current request</li>
<li><code>pbmfasic_force_synchronous_render</code> — return true to render the CAPTCHA inline instead of lazy-loading it via AJAX, useful when a form submits over a custom AJAX flow that needs the CAPTCHA fields present at first paint</li>
</ul>
<h3>Credits</h3>
<p>This plugin bundles the following third-party assets, all under licenses compatible with the GPL v3:</p>
<ul>
<li><strong>Font Awesome 4.7.0</strong> — http://fontawesome.io — Font: SIL OFL 1.1, CSS: MIT License. Files: <code>css/fontawesome.css</code>, <code>fonts/fontawesome-webfont.*</code>, <code>fonts/FontAwesome.otf</code>.</li>
<li><strong>Font Awesome SVG icons</strong> (<code>svgs/</code>) — derived from the Font Awesome 4.7 free icon set — License: CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/).</li>
<li><strong>Audio: “Failure 01”</strong> by rhodesmas — https://freesound.org/s/342756/ — License: CC BY 4.0. Used as <code>audio/wrong.mp3</code> (trimmed).</li>
<li><strong>Audio: “Success 04”</strong> by rhodesmas — https://freesound.org/s/322929/ — License: CC BY 4.0. Used as <code>audio/correct.mp3</code> (trimmed).</li>
</ul>
<p>The plugin source code is distributed under the GNU GPL v3 (see <code>LICENSE</code>).</p>


Multi-Form Anti-Spam Image CAPTCHA

Image CAPTCHA, honeypot and accessibility spam blocking for Gravity Forms, CF7, WPForms, Formidable, Elementor, WooCommerce, comments, and login.

Ryan Tipones

<p><strong>Secure Form Checkout</strong> connects your Formidable Forms payment forms to the accept.blue payment processing platform. All card data is handled inside a secure accept.blue Hosted Tokenization iFrame — it never passes through your server, keeping your site PCI-compliant.</p>
<p>This is the <strong>free Lite version</strong>.</p>
<h4>What’s Included in Lite</h4>
<ul>
<li><strong>Credit card payments</strong> via accept.blue Hosted Tokenization iFrame — card data never touches your server</li>
<li><strong>Test / Sandbox mode</strong> — safely test payments with accept.blue sandbox credentials before going live</li>
<li><strong>Test Connection</strong> — verify your API credentials without leaving WordPress</li>
<li><strong>Debug logging</strong> — dedicated per-month log file with an in-admin log viewer, gated behind a settings toggle</li>
<li><strong>card authentication</strong> — optional EMV card authentication browser-based authentication per Form Action</li>
<li><strong>Per-form API credential override</strong> — run different forms against different accept.blue merchant accounts</li>
<li><strong>Processing overlay</strong> — animated spinner shown on form submit while payment processes</li>
<li><strong>Minified assets</strong> — production-ready JS and CSS; source files served automatically when WP_DEBUG is on</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 6.0 or higher</li>
<li>PHP 7.4 or higher</li>
<li>Formidable Forms Pro (required for payment fields)</li>
<li>An active accept.blue merchant account (sign up at https://accept.blue)</li>
</ul>
<h3>Source code</h3>
<p>The unminified source files for all JavaScript and CSS are included in the plugin’s assets/ directory alongside the minified production files. No separate build step is required to review the source.</p>
<h3>External Services</h3>
<p>This plugin connects to the accept.blue payment processing platform. Two distinct accept.blue services are contacted:</p>
<h4>1. accept.blue Payment API</h4>
<p>Used to authorise and capture credit card payments. When a visitor submits a payment form, the plugin sends a server-side request to the accept.blue API to process the charge.</p>
<p>Data sent: a short-lived card nonce token (generated by the Hosted Tokenization iFrame — never the raw card number or CVV), the payment amount, currency code, and the site’s accept.blue API credentials.</p>
<p>When data is sent: only when a visitor submits a payment form and the tokenization step has completed successfully.</p>
<ul>
<li>API endpoint (live): https://api.accept.blue/api/v2/</li>
<li>API endpoint (sandbox): https://api.sandbox.accept.blue/api/v2/</li>
<li>accept.blue website: https://accept.blue</li>
<li>API documentation: https://docs.accept.blue/api/v2</li>
<li>Terms of Service / Privacy Policy: https://accept.blue/terms-of-use/</li>
</ul>
<h4>2. accept.blue Hosted Tokenization Service</h4>
<p>Used to securely capture card details inside an iFrame. When a visitor views a payment form, the browser loads a secure iFrame from accept.blue’s tokenization service. The visitor enters their card number, expiry, and CVV directly into this iFrame. That card data is sent from the visitor’s browser directly to accept.blue — it never passes through your WordPress server.</p>
<p>Data sent: raw card details (card number, expiry, CVV) sent from the visitor’s browser directly to accept.blue’s tokenization servers. Your server receives only a short-lived nonce in return.</p>
<p>When data is sent: when the visitor enters card details and submits the payment form.</p>
<ul>
<li>Tokenization endpoint (live): https://tokenization.accept.blue/tokenization/v0.3/</li>
<li>Tokenization endpoint (sandbox): https://tokenization.sandbox.accept.blue/tokenization/v0.3/</li>
<li>Terms of Service / Privacy Policy: https://accept.blue/terms-of-use/</li>
</ul>


RyanPay Card Payments with accept.blue for Formidable

Accept credit card payments through accept.blue directly inside your Formidable Forms.

Multi-Form Anti-Spam Image CAPTCHA vs RyanPay Card Payments with accept.blue for Formidable