开发者 | webspeed |
---|---|
更新时间 | 2020年5月7日 22:45 |
PHP版本: | 3.3 及以上 |
WordPress版本: | 5.4 |
版权: | GPLv3 |
版权网址: | 版权信息 |
You can visit Stop-Spam settings page and enable saving blocked comments as spam in the spam section. To enabled that you need to go to: WordPress admin dashboard => Settings section => Stop-Spam Saving blocked comments into spam section is disabled by default. Saving spam comments can help you to keep all the comments saved and review them in future if needed. You can easily mark comment as "not spam" if some of the comments were blocked by mistake.
Stop-spam plugin blocks 100% of automatic spam messages (sent by spam-bots via post requests). Plugin does not block manual spam (submitted by spammers manually via browser).
The blocking algorithm is based on 2 methods: 'invisible js-captcha' and 'invisible input trap' (aka honeypot technique).
The 'invisible js-captcha' method is based on fact that bots does not have javascript on their user-agents. Extra hidden field is added to comments form. It is the question about the current year. If the user visits site, than this field is answered automatically with javascript, is hidden by javascript and css and invisible for the user. If the spammer will fill year-field incorrectly - the comment will be blocked because it is spam.
The 'invisible input trap' method is based on fact that almost all the bots will fill inputs with name 'email' or 'url'. Extra hidden field is added to comments form. This field is hidden for the user and user will not fill it. But this field is visible for the spammer. If the spammer will fill this trap-field with anything - the comment will be blocked because it is spam.
You can find the info block with total spam blocked counter in the admin comments section. You can hide or show this info block in the "Screen Options" section. The visibility option for this info block is saved per user.
Plugin blocks spam only in comments form section and does not block spam from any other forms on site. If you installed and activated the plugin and you still receiving spam - probably this could be because of some other forms on your site (for example feedback form).
Users rarely use trackbacks because it is manual and requires extra input. Spammers uses trackbacks because it is easy to cheat here. Users use pingbacks very often because they work automatically. Spammers does not use pingbacks because backlinks are checked. So trackbacks are blocked but pingbacks are enabled. You may read more about the difference between trackbacks and pingbacks
All modern browsers and IE8+ are supported.
Stop-spam plugin works with disabled JavaScript. JavaScript is disabled on less than 1% of devices. Users with disabled JavaScript should manually fill catcha-like input before submitting the comment.
If site has caching plugin enabled and cache is not cleared or if theme does not use 'comment_form' action and there is no plugin inputs in comments form - plugin tries to add hidden fields automatically using JavaScript.
You may check out the source code of the plugin. The plugin is pretty small and easy to read.