What is BotShield?
A WordPress plugin that uses simple methods to defeat bots from using forms.
It also includes a very simple contact form system that also has methods to defeat bots.
- Disclaimer:
- There is no guarantee that a spammer or bot submission will occasionally make past all defenses.
This plugin is an attempt to make it hard for bots and spammers to abuse your forms.
With minimal interference of real humans using your forms for their intended purpose.
Bots (especially AI) are getting more and more sophisticated.
This plugin will evolve with the changes and increased sophistication of bots. - BotShield
- This feature works by validating the data from the request for the page. Headers, User-Agent, and IP Address.
Those are checked for bot like attributes. The IP is checked against DNS-RBLs.
The IP is given a score and the system reacts differently depending on the score.
This protection is page content level.
So the page content will not render in the HTML until it passes all tests with a score that allows it. - Simple Forms (If Activated)
- BETA Mode – Forms, Block List, and Anti-Spam are not fully tested. Use with caution.
Create basic forms.
Bots and spammers attack all forms they can find.
This system is designed to confuse and delay bots.
This system also has extra 3 layers of protections:- BotShield (if enabled on the page with the form)
- Block List
- Anti-Spam
The system is very basic and only provides core functions and fields. Name, Email, Phone (optional), and Message.
Building this out to allow for more fields and more complex fields is in the works. - Block List (for use with Simple Forms)
- Allows blocking by:
- Email Address: the full email: test@example.com
- Email Username: the user part of the email: test@ (so any test@domain.tld will be blocked)
- Email Domain: the domain part of the email: @example.com (so any user@example.com will be blocked)
- Whole Words: words that will be blocked (“hello” or “hello world”)
This adds a layer of control for persistent spammers.
- Anti-Spam (for use with Simple Forms)
- A few very basic anti spam filters are in place.
Filters that should be part of every online form system, but for some reason are now.
Check for HTML, email addresses, links/urls (domain.tld), and (if enabled) non English (ASCII) characters (and emojis). - DNS-RBL:
- DNS based Real Time Blocklists. Like SpamHaus, SpamCop, and SORBS.
