KitCode

OneClick Form Lite adds a lightweight contact form to your WordPress site via shortcode:
<ul>
<li>Shortcode: [oneclickform]</li>
<li>Fields: Name, Email, Subject, Message + GDPR consent checkbox</li>
<li>Anti-spam: honeypot + server-side rate limiting</li>
<li>Delivery modes:
<ul>
<li>WordPress wp_mail()</li>
<li>Built-in SMTP</li>
<li>File mode (writes messages to your uploads directory)</li>
</ul>
</li>
<li>Optional Google reCAPTCHA v3 (score-based)</li>
<li>Translations: EN (default) + FR, ES, PT-BR (via included .mo files)</li>
</ul>
Important notes: 
* This plugin does NOT store submitted messages in the WordPress database. 
* Messages are delivered by email (wp_mail/SMTP) or written to files (File mode). 
* Your host/mail provider may store emails in logs and mailboxes. 
* No minified/compiled assets are shipped with this plugin. All distributed CSS/JS is human-readable.
Documentation is included in the plugin: 
docs/oneclick-form-lite-user-guide.html
<h3>Source code</h3>
The plugin ships unminified, human-readable JS/CSS source files. No build process is used.
<h3>External services</h3>
1) This plugin can optionally integrate Google reCAPTCHA v3 to help prevent spam form submissions.
When enabled: 
– The visitor’s browser loads Google’s reCAPTCHA script: 
 https://www.google.com/recaptcha/api.js?render=YOUR_SITE_KEY 
– The browser communicates with Google to obtain a reCAPTCHA token.
On form submission: 
– The plugin sends the reCAPTCHA token to Google for verification: 
 https://www.google.com/recaptcha/api/siteverify 
– The verification request includes the token and the submitter’s IP address (remoteip) when available.
Service provider: Google LLC 
Terms of service: https://policies.google.com/terms 
Privacy policy: https://policies.google.com/privacy
2) This plugin can also send emails via an SMTP server configured by the site administrator (optional).
When SMTP is enabled and an email is sent: 
– The plugin connects to the configured SMTP host and port. 
– Email data is transmitted to the SMTP server in order to deliver the message.
Data sent to the SMTP server may include: 
– Sender and recipient addresses, subject, message content 
– Technical email headers 
– Authentication data (username/password) if configured by the site administrator
Service provider: The SMTP provider selected by the site administrator (e.g., hosting provider, Google Workspace, Microsoft 365, etc.) 
Terms of service: See the selected SMTP provider’s terms 
Privacy policy: See the selected SMTP provider’s privacy policy

OneClick Form Lite

Lightweight contact form with built-in SMTP, optional file delivery, and Google reCAPTCHA v3.

Matt Biscay

Tired of deleting spam comments every day? SpamJam is a lightweight, invisible anti-spam solution that blocks automated spam before it hits your database—without annoying your legitimate users with captchas or verification steps.
<h4>Why SpamJam?</h4>
Unlike traditional anti-spam plugins that rely on third-party services or frustrating captchas, SpamJam uses intelligent honeypot techniques and behavioral analysis to silently eliminate spam bots. Your real visitors won’t see any difference, but spam bots will be stopped cold.
<h4>Free Features</h4>
✅ Honeypot Protection – Invisible fields that trap spam bots 
✅ Referrer Validation – Blocks direct form submissions 
✅ Nonce Security – CSRF protection for all comment forms 
✅ Smart Blocklist – Filters common spam keywords 
✅ Zero Configuration – Works immediately after activation 
✅ No Captchas – Never annoy your real users 
✅ Lightweight – Minimal impact on site performance 
✅ WooCommerce Compatible – Works with HPOS
<h4>Pro Features (Premium)</h4>
🚀 Registration Spam Protection – Protect user registration forms with email verification 
🚀 Premium Blocklist – Auto-updating list of 15,000+ spam terms 
🚀 Custom Blocklist – Add your own keywords and patterns to block 
🚀 Geographic Blocking – Block comments from specific countries 
🚀 IP Blocking – Block specific IP addresses or ranges 
🚀 Rate Limiting – Prevent spam floods with configurable limits 
🚀 Email Whitelist – Always allow trusted email addresses 
🚀 Spam Logging & Analytics – Track and analyze blocked spam attempts 
🚀 Content Validation – Set minimum comment length and maximum links 
🚀 Contact Form Protection – Protect Contact Form 7, WPForms, Gravity Forms 
🚀 User Enumeration Blocking – Enhanced security against attacks 
🚀 Priority Support – Get help when you need it
<a href="https://utopique.net/products/spamjam/" rel="nofollow ugc">Upgrade to SpamJam Pro →</a>
<h4>Perfect For</h4>
<ul>
<li>Blogs with active comment sections</li>
<li>Membership sites</li>
<li>WooCommerce stores</li>
<li>Community websites</li>
<li>Any WordPress site tired of spam</li>
</ul>
<h4>How It Works</h4>
SpamJam uses multiple layers of protection:
<ol>
<li>Honeypot Fields – Hidden form fields that only bots fill out</li>
<li>JavaScript Validation – Ensures forms are submitted by real browsers</li>
<li>Referrer Checking – Verifies submissions come from your site</li>
<li>Hash Validation – Cryptographic verification of form integrity</li>
<li>Keyword Filtering – Blocks known spam patterns</li>
</ol>
All of this happens invisibly in the background. Your legitimate users never see a captcha or verification step.
<h4>Privacy First</h4>
SpamJam doesn’t send your data to third-party services. Everything happens on your server, keeping your users’ information private and your site GDPR-compliant.

SpamJam

Stop 99% of spam comments and registrations automatically. Zero captchas, zero hassle. Your visitors won't even notice it's there.

OneClick Form Lite vs SpamJam