SpamOff – Google reCaptcha for WooCommerce
| 开发者 | pluginos |
|---|---|
| 更新时间 | 2026年9月26日 21:31 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0.2 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
SpamOff is a lightweight Google reCAPTCHA plugin for WooCommerce and WordPress that protects your website from spam, fake registrations, brute-force attacks, fake orders, comment spam, and automated bots. Easily add Google reCAPTCHA v2 or v3 to WooCommerce checkout, login, registration, guest checkout, and lost password forms, as well as WordPress login, registration, comments, and custom forms in just a few minutes.
Highlighted Features
- Supports Google reCAPTCHA v2 (checkbox) and v3 (invisible, score-based)
- Protects WooCommerce and WordPress:
- Login
- Registration
- Lost Password
- Checkout
- Guest Checkout
- Comments
- Customize the reCAPTCHA v3 spam score threshold
- Add reCAPTCHA to custom forms using the
[spamoff_bot_protection]shortcode - Customize the reCAPTCHA v2 theme, size, and error message
- Supports WooCommerce Classic Checkout
- Supports WooCommerce Block Checkout
- Compatible with WooCommerce HPOS (High-Performance Order Storage)
[spamoff_bot_protection] | Manually place the captcha anywhere in a theme, page builder, or custom form.
| reCAPTCHA v2 Theme | Light or Dark, to match your site design |
| reCAPTCHA v2 Size | Normal or Compact |
| Failed Verification Message | Fully editable text shown to visitors who fail the check (default: "Verification failed. Please try again.") |
Shortcode Support
Use the [spamoff_bot_protection] shortcode to add Google reCAPTCHA to custom forms, page builders, or theme templates without writing custom code.
Use Cases
- Stop fake WooCommerce orders and card-testing bots — protect Checkout and Guest Checkout with invisible v3 scoring so bots never reach payment.
- Block fake account creation — add Google reCAPTCHA to WooCommerce and WordPress registration and login forms to stop credential stuffing and brute-force attacks.
- Kill comment spam — add Google reCAPTCHA to your WordPress comment form without modifying your theme.
- Protect password resets — stop automated abuse of the Lost Password form.
- Custom forms and page builders — drop the
[spamoff_bot_protection]shortcode into any form (contact forms, custom checkout fields, etc.) for coverage outside the built-in list. - Modern WooCommerce stores on Block Checkout — get real Store API-level protection instead of a plugin that only works on the legacy Classic Checkout shortcode.
- Install and activate SpamOff.
- Get a free Site Key and Secret Key at https://www.google.com/recaptcha/admin — choose v2 or v3 depending on which experience you want.
- Go to WooCommerce → Settings → SpamOff → General Settings, paste your Site Key and Secret Key, and pick v2 or v3.
- If using v3, set your Minimum Score (start at 0.5, lower it if real customers get blocked).
- Go to the Advanced Settings tab and toggle on the forms you want protected (Login, Registration, Checkout, Guest Checkout, Lost Password, Comments).
- Optional: go to Customization to set your v2 widget theme/size and edit the failure message.
- Save changes and test by submitting a protected form as a logged-out visitor.
安装:
- Upload the plugin folder to
wp-content/plugins/or install via the Plugins screen. - Activate the plugin.
- Get a Site Key and Secret Key from https://www.google.com/recaptcha/admin
- Go to WooCommerce → Settings → SpamOff.
- On the General Settings tab, paste your Site Key and Secret Key, choose v2 or v3, and (for v3) set a minimum score.
- On the Advanced Settings tab, check the forms you want to protect.
常见问题:
Does SpamOff support both Google reCAPTCHA v2 and v3?
Yes. SpamOff supports Google reCAPTCHA v2 (checkbox) and reCAPTCHA v3 (invisible, score-based). You can switch between them at any time from the General Settings page.
Does SpamOff support WooCommerce Block Checkout?
Yes. The Block Checkout uses the Store API, and SpamOff injects a v3 token into the checkout request's extension data, then verifies it server-side before the order is built. The token refreshes automatically every 80 seconds (and immediately when the customer returns to the tab) so it never goes stale during a long checkout. Block Checkout always uses v3 — even if v2 is selected in the settings, v2 only applies to Classic Checkout and other forms.
Can I add Google reCAPTCHA to WordPress forms that aren't WooCommerce?
Yes. SpamOff protects standard WordPress Login, Registration, Lost Password, and Comments forms in addition to WooCommerce forms. You can also use the [spamoff_bot_protection] shortcode to add it to any other form on your site.
Does this work with WooCommerce HPOS (Custom Order Tables)?
Yes. The plugin declares compatibility on before_woocommerce_init.
Why is verification failing for legitimate users on v3?
The minimum score may be too strict. Lower Minimum Score in General Settings (try 0.3) and test again. Google adjusts scores based on reputation, so brand-new sites tend to score lower until they accumulate traffic.
更新日志:
1.0.2
- Fixed a functionality issue.
- Renamed the plugin to SpamOff – Google reCAPTCHA for WooCommerce.
- Improved the plugin description.
- Initial release.