Quarivo Comment Shield
| 开发者 | taka235345 |
|---|---|
| 更新时间 | 2026年8月3日 09:52 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- Balanced uses language-neutral behavior and content evidence. It is the default for non-Japanese WordPress sites.
- Japanese-site enhanced quarantines an untrusted non-Japanese first contact only when an external link or submitted Website supplies independent evidence.
- Strict Japanese quarantines every new untrusted comment without Japanese text. It is the default for Japanese WordPress sites and is intended for Japanese-only communities.
- Trusted users, exact allowed email addresses, and previously approved commenters remain exempt in every mode.
- A mode-based quarantine is never silently deleted. The original comment stays local, reviewable, restorable, and protected by the Review Safety Guard.
- Shows WordPress-stored moderation candidates at the top.
- Opens the full original comment, author details, score, reasons, and history in an accessible modal.
- Prioritizes unread, lower-confidence comments that may need human review.
- Searches by author, email address, IP address, or comment text.
- Filters by quarantined, unreviewed, possibly important, confirmed spam, restored, and all states.
- Shows 25, 50, or 100 rows per page without loading the entire quarantine at once.
- Processes every matching result in small resumable batches, even when thousands are waiting.
- Protects every unopened comment scored 9 or lower from bulk spam confirmation until a moderator opens it.
- Allows deletion only after a record has been confirmed as spam or restored.
- Keeps confirmed-spam records visible in a dedicated one-click view until retention cleanup or an explicit deletion.
- Lets a moderator undo a spam confirmation without publishing the comment and reverses that learning vote.
- Stops high-confidence automated spam before it enters the normal WordPress comments table.
- Uses a honeypot, cache-safe form token, timing signals, duplicate/rate checks, link patterns, and content heuristics.
- Recognizes compact machine-link promotions by compound structure instead of individual brands or destination domains.
- Recognizes compact bare-link drops through repeated destination, unrelated identity, generic invitation, and message-length evidence.
- Detects reward and payout lures only when a known shortened link and an immediate action prompt provide independent evidence.
- Detects gambling-link campaigns across several common scripts while exempting recovery, safety, warning, and research context.
- Suppresses comment notification noise only for comments intercepted by the plugin.
- Works with standard WordPress comments and includes compatibility handling for common AJAX comment flows.
- Requires no account, API key, CAPTCHA, or external service.
- Aggregates equivalent repeated spam into one review record and places a finite ceiling on unreviewed quarantine growth.
- Falls back to WordPress moderation instead of losing a comment when quarantine capacity is unavailable.
安装:
- Upload the
quarivo-comment-shieldfolder to/wp-content/plugins/, or install it from the WordPress plugin directory. - Activate Quarivo Comment Shield through the Plugins screen.
- Use the activation guide, or open Comments > Quarantined Comments, to review candidates. Basic protection needs no setup.
- If another plugin also blocks or discards comments, test carefully and deactivate the overlapping filter to avoid double decisions.
屏幕截图:
常见问题:
Does it quarantine every non-Japanese comment?
Only when Strict Japanese is selected and the commenter is not already trusted. Balanced never treats a language as suspicious, and Japanese-site enhanced also requires an external link or submitted Website. In every mode the comment is quarantined for review rather than permanently deleted, and a restored or previously approved commenter can be trusted safely.
Can I restore a legitimate comment?
Yes. Open the comment in the review inbox and restore it either as pending or published. You can also publish it and teach the plugin to trust that exact email address.
Does learning send comments to an AI or external API?
No. Feedback and score adjustments stay in the local WordPress database. No external service is used.
Can learning make protection unsafe?
Learning uses only human moderator feedback and is tightly capped. False-positive history can slightly reduce selected soft signals. A single matching campaign confirmation remains a small supporting signal; repeated independent confirmations can add a larger but bounded score. Similarity never blocks a comment by itself, and a matching restored comment vetoes the campaign score. Honeypot hits and other strong signals are not weakened automatically.
Will my learning disappear after an update or reinstall?
No during a normal update. Campaign signatures are stored in a dedicated versioned table and earlier retained verdicts are imported in resumable batches. WordPress plugin deletion retains the table by default, so reinstalling reconnects it. Learning is removed only by the explicit Reset learning history action, by choosing permanent Quarivo data removal before plugin deletion, or by the documented two-year/5,000-signature safety limits.
What happens to old quarantine records?
Only reviewed records marked as confirmed spam or restored are removed after the selected retention period. Equivalent repeats are grouped. Unreviewed records remain until a moderator handles them, subject to a finite capacity; overflow falls back to WordPress moderation rather than being discarded.
Can I process thousands of quarantined comments at once?
Yes. Choose a filter, select “all matching results,” and apply the action. The browser requests a small server-side batch at a time and shows progress. The job has a fixed upper boundary so newly arriving comments are not unexpectedly included, retries brief connection failures, and can resume when the same moderator returns. Keep the review screen open while it is actively running. As an extra false-positive safeguard, unopened comments with an assessment score of 9 or lower are never included in bulk spam confirmation. Open those possible-important comments first and decide individually. High-confidence queues remain eligible for safe staged processing.
What data is stored?
For quarantined comments, the plugin stores the submitted name, email address, URL, comment, IP address, browser information, submission time, target post, and local assessment details. This data remains on the site and is included in WordPress privacy export and erasure requests.
What happens on uninstall?
By default, WordPress plugin deletion retains quarantine records, action history, settings, local learning, and Quarivo comment metadata. Reinstalling Quarivo reconnects that data and shows a recovery notice. Temporary jobs, locks, and scheduled tasks are removed. Before deletion, open Comments > Quarantined Comments > Settings > Data and removal. You can download a private JSON export for safekeeping or explicitly enable permanent removal. The JSON export is not imported automatically. Permanent removal requires a confirmed saved choice and deletes only Quarivo data; ordinary WordPress comments, posts, users, and media are never removed. While the plugin is absent, its review screen and WordPress privacy exporter/eraser are unavailable.
Where did a comment go after I confirmed it as spam?
It was not immediately deleted. Open the Confirmed spam count at the top of the review inbox, or choose Confirmed spam from the status filter. The record remains reviewable until you explicitly delete it or the reviewed-record retention period ends. If the confirmation was a mistake, open the record and choose Undo spam confirmation. It returns to quarantine without being published, and the earlier local-learning vote is reversed.
更新日志:
- Keeps the Needs review badge synchronized with the actionable WordPress-held comment list.
- Stops already reviewed or explicitly moderated comments from remaining in the review count.
- Restores unreviewed spam-status candidates to the priority list across supported WordPress versions.
- Counts each WordPress comment once even if legacy metadata contains duplicate decision rows.
- Adds privacy-preserving spam campaign similarity memory trained only by explicit moderator verdicts.
- Recognizes small wording, identity, number, and destination changes through versioned hashed signatures rather than readable stored text.
- Requires independent destination and scorer evidence, keeps trusted commenters exempt, and lets similar restored comments veto a learned spam score.
- Makes every source verdict idempotent and reversible so repeated actions do not double-count and corrected decisions replace or remove earlier learning.
- Imports earlier retained Quarivo verdicts in bounded resumable batches and shows durable signature count, import progress, and storage health in the Learning screen.
- Retains campaign learning through normal updates and default plugin removal, includes it in private JSON export, and applies two-year and 5,000-signature safety limits.
- Adds Balanced, Japanese-site enhanced, and Strict Japanese protection modes with clear tradeoffs and one-click selection.
- Uses a locale-aware default: Japanese WordPress sites start in Strict Japanese, while other site languages start in Balanced.
- Quarantines mode matches reversibly instead of silently deleting them, with trusted and previously approved commenters exempt.
- Detects linked non-Japanese first contacts through external-destination structure rather than individual languages, domains, brands, or campaign phrases.
- Ignores copied post-title text when deciding whether a comment contains meaningful Japanese.
- Adds an upgrade notice, current-mode status badge, settings shortcut, audit/export coverage, and multilingual mode regression tests.
- Detects shortened-link payout, prize, profit, bonus, and reward lures through compound evidence instead of campaign or destination lists.
- Keeps shortened links neutral by themselves and separately scores immediate action prompts and outcome promises.
- Protects trusted commenters, institutional sources, explicit review requests, ordinary document links, event invitations without reward claims, and editorial scam warnings.
- Removes scheme-less short URLs from visible-text analysis so compact-template measurements stay consistent with URL detection.
- Adds regression and real HTTP-submission coverage for the live payout bypass and unseen multilingual reward campaigns.
- Detects compact multilingual bare-link drops without maintaining destination, brand, TLD, or email-provider blocklists.
- Uses repeated author Website, unrelated email identity, generic visit wording, short payload, and destination depth as independent evidence.
- Silently quarantines root-only high-confidence link drops while routing lower-confidence deep-link campaigns to WordPress spam.
- Protects trusted commenters, matching identities, same-site email, institutional email, shared platforms, substantive messages, and explicit feedback or technical-help requests.
- Adds regression and real HTTP-submission coverage for the live Cyrillic bypass, unseen multilingual variants, and normal link-sharing controls.
- Detects compact repeated-Website promotions using machine link markup, unrelated email sources, short payloads, and identity mismatch as supporting evidence.
- Expands compound gambling-link detection across common Latin, Cyrillic, Japanese, Chinese, Korean, and Arabic terms without treating any language as suspicious.
- Protects gambling-recovery, safety, warning, research, trusted-commenter, institutional-email, same-site, shared-service, and legitimate identity-matched links from silent quarantine.
- Adds regression coverage for the live Cyrillic .com bypass, unseen gambling families, unknown promotional topics, and multilingual false-positive controls.
- Adds Review Safety Guard so unopened lower-confidence comments cannot be swept into a bulk spam confirmation.
- Adds one-click undo for spam confirmation without publishing the comment and reverses the earlier learning vote.
- Makes the possibly-important count exactly match its filtered list and removes stale admin count results.
- Scrolls priority-count links directly to the filtered results and adds explicit confirmation and outcome messages for spam actions.
- Makes the Currently quarantined summary card a direct shortcut back to the complete auto-quarantine list.
- Detects high-confidence editorial-looking SEO link insertion using compound structure instead of individual domains or languages.
- Keeps ordinary reference links, public-mailbox comments, institutional sources, same-site links, and trusted commenters conservatively reviewable.
- Retains Quarivo data by default when WordPress deletes the plugin and reconnects it after reinstallation.
- Adds a confirmation-protected permanent-removal option that deletes only Quarivo data.
- Adds verified data counts, a private streamed JSON export, and a direct review link before removal.
- Keeps Confirmed spam records visible in a one-click filtered view until explicit deletion or scheduled retention cleanup.
- Applies fail-safe defaults and site-by-site removal choices on multisite.
- Improved language-neutral structural spam detection and local learning from WordPress moderation actions.
- Added regression coverage for historical, adversarial, multilingual, same-site, and legitimate comments.
- Clarified important-review filtering and the exact effect of each bulk action.
- Improved compound link-spam detection while keeping languages, missing JavaScript, shared IP addresses, and normal reference links neutral or non-conclusive.