SpamPot

Blocks spam signups by adding an invisible field to your registration and login forms, and switching its id with the real username or email form field.

When spam bots blindly fill the “required” fake field in, WP will redirect them to an error message and not let them register or login.

No 3rd party service, no intrusive captchas.

1. Upload the plugin files to the /wp-content/plugins/spampot/ directory, or install the plugin through the WordPress plugins screen directly.
2. Activate the plugin through the ‘Plugins’ screen in WordPress
3. That’s it, no more configuration needed.

Will This Stop Everything?

• This honeypot technique works against the lazy “drive by” automated spambots (ie. most of them), but will not be effective against spammers specifically targetting your site nor spammers signing up by hand.

0.3

• Initial release.

0.31

• Fix for 4.5’s changed login text.

0.32

• Changed the way the honeypot field was inserted to avoid a conflict with my Custom Logins plugin.

0.33

• If the honeypot field is unable to be inserted, then the form will continue working and notify the admin by email of this failure.

0.34

• Changed the regex that matches the “normal” username field to be slightly more robust.