NoCaptcha Spam Filter for Contact Form 7
| 开发者 | pontocinza |
|---|---|
| 更新时间 | 2026年4月22日 17:41 |
| 捐献地址: | 去捐款 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 6.9 |
| 版权: | GPL-2.0-or-later |
| 版权网址: | 版权信息 |
详情介绍:
NoCaptcha Spam Filter for Contact Form 7 provides a deterministic, cache-safe, multi-layered defense against automated form submissions for Contact Form 7 without the need for CAPTCHAs or external libraries.
The plugin uses a combination of:
- Unique Honeypot: A site-specific hidden field that traps bots.
- Cryptographic Signing: Ensures form tokens are genuine and haven't been tampered with.
- Anti-Replay Nonces: Each submission is unique; tokens cannot be reused.
- Time-Check Validation: Blocks bots that fill out forms faster than humanly possible.
- Cache-Safe Architecture: Automatically detects stale tokens on cached pages and refreshes them via a lightweight REST API fallback.
安装:
- Upload the plugin folder to the '/wp-content/plugins/' directory.
- Activate the plugin through the 'Plugins' menu in WordPress.
- No further configuration is required. The protection is automatically applied to all Contact Form 7 forms.
常见问题:
Does it work with WP Rocket or Cloudflare?
Yes. If a page is served from cache, the JavaScript will automatically fetch a fresh security token from the server before submission.
Why are my legitimate submissions being blocked?
The plugin requires a minimum of 20 seconds to fill a form. If your users submit forms very quickly, you can change this threshold by defining 'CF7NCSP_MIN_TIME' in your 'wp-config.php'.
更新日志:
= 1.1.0 = (2026.04.22)
- Added: hourly cron-based garbage collection for expired transients.
- Fixed: explicit version set on wp_register_script.
- Initial release. /eof/