Rabbit Builds

Rabbit Builds Anti-Spam Comment Shield is a fast, reliable anti-spam plugin for the default WordPress commenting system. It blocks automated bot submissions using layered validation, while keeping the experience clean for real visitors.
Developed and maintained by <a href="https://rabbitbuilds.com/" rel="nofollow ugc">Rabbit Builds</a> — visit our website to explore more WordPress tools and solutions.
<h3>Important</h3>
<ul>
<li>Clear your page cache after activation or after changing plugin settings.</li>
<li>Works with the default WordPress comment form only (not AMP comment forms).</li>
</ul>
<h4>Features</h4>
<ul>
<li>🛡️ Hash-Based Verification — Blocks bots by hiding the comment form action URL</li>
<li>🍯 Honeypot Trap — Hidden field that catches bots filling every input</li>
<li>⏱️ Time-Based Check — Rejects comments submitted too quickly</li>
<li>🔒 REST API Protection — Blocks unauthenticated REST API comments</li>
<li>📊 Spam Statistics Dashboard — Real-time total & daily blocked spam counter</li>
<li>⚙️ Modern Settings Page — Beautiful card-based UI with toggle switches</li>
<li>🔔 Admin Bar Counter — See blocked spam count in the admin bar</li>
<li>✏️ Custom Block Message — Personalize the blocked spam response</li>
<li>100% GDPR Compliant — No external requests, no cookies, no tracking</li>
<li>Captcha-Free — Completely invisible to your visitors</li>
<li>~200 bytes inline JavaScript — Zero performance impact</li>
<li>Compatible with all page caching and performance optimization plugins</li>
</ul>
<h4>How does it work?</h4>
<ol>
<li>The plugin removes the comment form action URL from raw HTML output.</li>
<li>When real user interaction is detected (scroll, mouse move, touch, or focus), JavaScript restores the action URL with a unique hash token.</li>
<li>On submit, the server validates the hash token, checks the honeypot field, and verifies submission timing.</li>
<li>If any check fails, the request is blocked with a 403 response before spam can reach your database.</li>
</ol>
<h3>License</h3>
This plugin is licensed under GPL-2.0-or-later. 
You may use, modify, and redistribute it under the terms of the GNU General Public License.

Rabbit Builds Anti-Spam Comment Shield

Advanced, lightweight, GDPR-compliant anti-spam protection for WordPress comments. No setup required.

Yakura

Commenti lets you disable comments across your entire WordPress site with one click, or selectively remove comments on specific post types. Hide comment forms, delete existing comments in bulk, stop spam, and clean up your admin — with full multisite network support and WP-CLI commands.
<h4>Why Commenti?</h4>
WordPress’s built-in Discussion settings only scratch the surface. They let you close comments on future posts, but existing posts stay open, comment menus clutter the admin, REST API endpoints remain exposed, and pingback headers keep broadcasting. Commenti closes every door — front end, back end, feeds, APIs — while giving you fine-grained control over what stays open.
<ul>
<li>One click vs. granular — Disable everything at once, or choose exactly which post types to affect</li>
<li>Per-post overrides — Keep comments open on specific posts even when disabled globally</li>
<li>Safe by default — Disabling comments never deletes anything. Deletion is a separate, intentional action</li>
<li>Developer-friendly — 16+ filters, 7+ actions, 8 WP-CLI commands, and a REST API for full programmatic control</li>
</ul>
<h4>Features</h4>
<ul>
<li>Disable All or Per Post Type — One toggle to disable comments everywhere, or select specific post types</li>
<li>Per-Post Override — Enable or disable comments on individual posts via a meta box</li>
<li>Show Existing Comments — Optionally keep displaying previously posted comments while blocking new ones</li>
<li>Admin Cleanup — Remove the Comments menu, admin bar item, dashboard widgets, and block editor comment blocks</li>
<li>REST API Blocking — Remove <code>/wp/v2/comments</code> endpoints and block comment requests</li>
<li>XML-RPC Blocking — Remove all comment-related XML-RPC methods</li>
<li>Feed & Pingback Removal — Remove comment RSS feeds, X-Pingback headers, and pingback XML-RPC methods</li>
<li>Avatar & Gravatar Control — Disable avatar display and block external Gravatar requests for privacy</li>
<li>Comment Type Whitelisting — Allow specific comment types like WooCommerce order notes or WP 6.9 Notes to bypass disabling</li>
<li>User Role Exclusions — Exempt specific user roles from comment restrictions</li>
<li>Scheduled Disable — Automatically close comments on posts older than a set number of days via WP-Cron</li>
<li>Bulk Comment Deletion — Delete comments by post type, comment type, or status with a statistics preview before you commit</li>
<li>Import/Export Settings — Transfer your configuration between sites via JSON files</li>
<li>Activity Log — Full audit trail of every settings change, import, and bulk deletion</li>
<li>Setup Wizard — Three-step first-run wizard to configure your site in under a minute</li>
<li>Multisite Support — Network activation with network-wide settings and per-subsite management</li>
<li>WP-CLI Commands — 8 commands for status, settings, deletion, stats, export, import, log, and reset</li>
<li>Custom REST API — <code>yakura-commenti/v1/</code> endpoints for reading and updating settings programmatically</li>
</ul>
<h4>For Developers</h4>
Commenti exposes 16+ filters and 7+ actions at every decision point — override whether a post type is disabled, modify settings before save, react after bulk deletions, filter REST endpoints, and more. All hooks are prefixed with <code>yakura_commenti_</code>.
WP-CLI: <code>wp yakura-commenti status|settings|delete|stats|export|import|log|reset</code>.
REST API: <code>GET/POST /yakura-commenti/v1/settings</code>, <code>GET /yakura-commenti/v1/status</code> (requires <code>manage_options</code>).
<h4>Requirements</h4>
<ul>
<li>WordPress 5.9 or later</li>
<li>PHP 7.4 or later</li>
</ul>

Commenti – Disable & Remove Comments, Stop Spam [Multi-Site Support]

Disable and remove comments site-wide or per post type. Control REST API, feeds, XML-RPC, admin UI, and avatars. Multisite ready

Rabbit Builds Anti-Spam Comment Shield vs Commenti – Disable & Remove Comments, Stop Spam [Multi-Site Support]