Linux 软件免费装

在这里免费安装WordPress以及其他软件

Banner图

WhoKnew Shield — Email, Phone & Address Security

开发者 whoknewio
更新时间 2026年3月17日 11:43
PHP版本: 7.4 及以上
WordPress版本: 6.9
版权: GPL-3.0-or-later
版权网址: 版权信息

标签

security anti-spam spam protection bot blocker email protection

下载

2.0.1 2.0.0

详情介绍:

WordPress security plugin for contact obfuscation — Stop bots from harvesting your email addresses, phone numbers, and physical addresses. Whether you need to hide email addresses in WordPress, deploy honeypot traps that actively catch scrapers, or defend against anti-scraping threats with a built-in Web Application Firewall, WhoKnew Shield provides email harvesting protection with zero configuration required. Why stores and businesses need contact security: WhoKnew Shield uses dual-layer security to help keep your contact information private. Free Features (Instant Setup) Pro Features ($80/year)
No coding. Works with any WordPress theme. Set it once, protect everything.
Upgrade to Pro → | View Features Why Auto-Detection Matters Manual shortcode plugins require wrapping every contact individually: Write naturally. Shield finds and protects email addresses, phone numbers, and physical addresses automatically. No gaps. No missed contacts. Plugin Switching Switch from other email security and anti-spam plugins with no broken pages: Just activate Shield Pro and deactivate the old plugin. All existing shortcodes continue working. No find-and-replace needed across your posts. Web Application Firewall (WAF) — Pro Feature Active security defense beyond passive hiding: The Pro version includes WAF capabilities through Scraper Trap™ honeypots: This turns passive protection into active security. You're not just hiding contacts — you're catching and blocking malicious bots. WhoKnew Intelligence™ — Community Blacklist Network (Pro) Collaborative threat protection and anti-spam defense: Shield Pro users can join the WhoKnew Intelligence™ network to share threat data and download a community-powered blacklist: When you catch a bot with Scraper Trap™ honeypots, you can anonymously share that IP to protect other Shield users. In return, you get access to a constantly-updated blocklist of confirmed threats.

安装:

  1. Upload whoknew-shield folder to /wp-content/plugins/
  2. Activate via Plugins > Installed Plugins
  3. Go to WhoKnew Shield in the admin menu to configure
  4. Enable auto-detection or add shortcodes to protect specific contacts
  5. Pro: Install WhoKnew Shield Pro and activate your license for advanced features

屏幕截图:

  • **Pro: Dashboard** — Full security active across all three contact types with advanced encryption and Intelligence
  • **Protection Settings** — Enable dual-layer contact security with one toggle
  • **Pro: Military-Grade Protection** — Domain-locked encryption unique to your site unlocked with Pro
  • **Auto-Detection** — Automatically find and protect email addresses; phone and address detection in Pro
  • **Shortcodes** — Manually protect email addresses, phone numbers and physical addresses anywhere in your content
  • **Pro: Scraper Trap™ WAF** — Honeypot overview with active blocks, IP whitelist and Intelligence network
  • **Pro: Scraper Trap™ Analytics** — Blocked scrapers chart, attack origins map and top threat countries in real time
  • **Pro: Scraper Trap™ Settings** — Configure honeypots, block duration and auto-promote to permanent rules
  • **Pro: Active Block Management** — Review, unblock or permanently ban caught scrapers
  • **Pro: WhoKnew Intelligence™** — Community blocklist covering nearly 15 million IPs, updated daily
  • **Pro: Robots.txt Integration** — Automatically bait bad bots into the honeypot while repelling good ones

升级注意事项:

2.0.0 Major launch! Dual-layer contact security, email auto-detection, click-to-reveal buttons, zero external dependencies. Pro adds WAF with honeypot defense, WhoKnew Intelligence™ network, and threat intelligence.

常见问题:

What does this plugin do?

It protects your email addresses, phone numbers, and physical addresses from spam bots and scrapers by encoding them in a way that real visitors can still see and use (with one click), but automated tools have a much harder time harvesting. Uses dual-layer obfuscation (HTML entities + CSS reversal + JavaScript) for robust contact security.

Does it work with caching plugins?

Yes. Obfuscation is applied when the page is generated, so cached pages still show protected content. Compatible with WP Rocket, LiteSpeed Cache, W3 Total Cache, SiteGround Speed Optimizer, and other major caching solutions.

Can I protect only emails, or only phones?

Yes. In Protection Settings you can turn auto-detection on or off for email addresses (free), phone numbers (Pro), and physical addresses (Pro) separately. Shortcodes let you protect specific pieces of content regardless of auto-detection settings.

Is the free plugin fully functional?

Yes. The free plugin has no locked features. You get dual-layer security, email auto-detection, click-to-reveal, and all shortcodes. Pro adds phone and address auto-detection, Scraper Trap WAF with honeypots, IP blocking, analytics dashboard, and competitor shortcode support.

What is Scraper Trap?

Scraper Trap is a Pro feature that functions as a Web Application Firewall (WAF) to actively catch and block bots. It uses hidden honeypots (invisible links/forms that only bots trigger). When a bot takes the bait, their IP is automatically blocked site-wide. This is active security defense vs passive hiding — it protects your entire WordPress site by identifying and blocking threats before they can harvest any email addresses, phone numbers, or physical addresses.

Can I switch from another email protection or anti-spam plugin?

Yes! WhoKnew Shield Pro supports shortcodes from other popular anti-spam and email security plugins, making migration straightforward. If you're using Email Address Encoder ([encode]), Neotrendy's Email Address Obfuscation ([obfuscate_email]), Email Encoder Bundle ([eeb_protect_emails], [eeb_mailto]), or Antispambot, just activate Shield Pro and deactivate the old plugin. All existing shortcodes work immediately. No find-and-replace needed.

Why is auto-detection useful?

Manual shortcode plugins require you to wrap every email address or phone number individually, which is easy to miss — especially in old posts, footer widgets, or page builder sections. Shield's auto-detection handles this automatically — set it once and contacts are protected everywhere.

Does it work without JavaScript?

The dual-layer security includes HTML entity encoding that works without JavaScript, but the click-to-reveal feature and full obfuscation require JavaScript to be enabled. Most modern users have JavaScript enabled. Pro includes advanced encryption that also requires JavaScript.

Is it GDPR / EU privacy compliant?

Yes. The plugin is designed to be GDPR-compliant. All security processing runs locally on your WordPress server. No external services are used for obfuscation. The free plugin has zero external dependencies — no CDN scripts, no API calls, no data transmission. Everything stays in your database. However, you should review your specific privacy requirements and ensure compliance with applicable regulations.

Does it work with page builders?

Yes. Shield works with Elementor, Divi, Beaver Builder, WPBakery, Gutenberg, Classic Editor, and any WordPress theme or page builder. Auto-detection finds email addresses, phone numbers, and physical addresses regardless of how your content was created.

Does it slow down my site?

No. Obfuscation processing is minimal and happens during page generation (cached by your caching plugin). No external scripts or CDN dependencies in the free version means zero external HTTP requests. Security protection is lightweight and fast.

Can real visitors still contact me?

Yes! Protected contacts show a simple click-to-reveal button. One click reveals the full contact information (email address, phone number, etc.). This is easy for real humans but blocks automated scrapers. You can customize the button text and styling.

What happens if I deactivate the plugin?

Your content returns to normal. Auto-detected contacts appear as plain text. Shortcodes will not render (you'll see the raw shortcode text), so you may want to remove them if you permanently deactivate. No data is lost — deactivation is completely safe.

更新日志:

2.0.1 2.0.0