ANON
This plugin allows you to embed ANON::form’s E2EE (End-to-End Encrypted) secure and anonymized web forms into your website with an iframe and with a shortcode. The requirements for secure communication with secure forms and storage of sensitive information are steadily increasing, not least from authorities through GDPR and the protection of whistleblowers. Something that is often overlooked but directly affected by the new requirements is the web forms used on the web pages and websites to create contact or collect information, with email as transport. ANON::form is a complete, easy-to-implement and scalable solution for secure electronic web-based forms that meet all existing requirements for not only security but also anonymity and (un)traceability. Create a Whistleblower Channel using secure e-forms ANON::form’s secure and anonymous e-forms meet the requirements of a secure whistleblowing channel. Simple and cost-effective (from €5/month), pay only for what you really need. Read more. ANON::form is secure and anonymized Meets safety requirements ANON::form is a service that meets the requirements for security according to the respective standard for: EU/GDPR + EU/Schrems II CH/revFADP UK/FCA US/SOX PCI-DSS + HIPAA + NIST and receives the rating A+ from Qualsys SSL Labs and ImmuniWeb. ANON::form follows the Zero Trust framework for a secure infrastructure. All certificates are encrypted with SHA256/RSA 2048 bits/TLS 1.2 + 1.3. Meets the requirement for Zero Access Encryption ANON::form does not store form data and meets the requirement for Zero Access Encryption, suppliers who receive form data from ANON::form comply with Zero Access Encryption in that all data stored is encrypted via endpoints (E2EE) with personal keys. Meets the requirement for privacy ANON::form fulfills the requirement for anonymity in that no traffic, error or other logs are activated (No-Log Policy), all form data is sent encrypted directly to receiving systems without intermediaries. Nothing is saved in the computer or browser by the service, but the use of incognito windows, or even better Tor Browser, is recommended to prevent sensitive data from being saved by the browser’s own functions. Protected against malicious code ANON::form is protected against malicious code by cleaning up all form data before it is processed by the server system. We do not have any online editing of forms, everything is uploaded manually by us after virus and other security checks. All services are run on own servers in secure datacenters. The encryption software we use is open source (OpenPGP) which is constantly reviewed by a large community spread all over the world. Spam protection All forms have Captcha protection against robot-generated spam. The Captcha function is locally installed and does not download anything from external sources such as Google. The forms also support hCaptcha, which offers better spam protection but poorer anonymity through increased traceability. EU/EN 301549 and W3C/WCAG 2.1 AA Compliance All forms meet the accessibility requirements according to EU Directive 2016/2102 and other corresponding directives in different countries according to WCAG 2.0/2.1 AA and associated legislation. Pre-built form templates ANON::form comes with pre-built form templates, both embedded and stand-alone with or whitout attachment, to help you save time. You can add, remove, or re-arrange fields as necessary. Or create special forms for handling sensitive data such as sick leave. Pre-built form templates: Contact form; a standard contact form Whistleblower forms; approved for use as a whistleblower channel, can also be used as a tip form for journalists etc Tip form; anonymous option for journalists, media and others who want to receive non-whistleblowing tips Sick leave form; a simple and quick way to report sickness absence with the mobile phone, pad or computer Currently available in 42 languages ANON::form forms support Albanian, Arabic, Bosnian, Bulgarian, Catalan, Croatian, Czech, Danish, Dutch, English, Estonian, Filipino, Finnish, Frensh, German, Greek, Hindi, Hungarian, Icelandic, Indonesian, Irish, Italian, Latvian, Lithuanian, Malay, Maltese, Norwegian, Persian, Polish, Portuguese, Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Swahili, Swedish, Tamil, Thai, Turkish, Ukrainian Mobile Ready and Optimized for Speed ANON::form forms are 100% responsive and mobile-friendly by default. We also optimized both the frontend and the backend to ensure maximum speed. How to use it ANON::form E2EE forms are web forms where the form data is encrypted in the browser and then sent as email via an encrypted and anonymized channel established by ANON::form’s servers. The recipient can be any email client that can decrypt PGP, we recommend a free account with Proton Read more
Mimi Captcha
在 WordPress 登陆、注册或评论表单中加入验证码,支持字母、数字、中文和算术形式。用户需要输入验证码才可以进行进一步操作,这可以有效阻止机器人发表垃圾评论或暴力破解密码,增加安全性。 如果需要在登陆密码输错若干次后限制该 IP 登陆,或拉入黑名单,可以将本插件配合 Limit Login Attempts Reloaded 插件使用。 Adds Captcha code anti-spam methods to WordPress forms. Forms include login form, registration form, lost password form and comments form. In order to post comments or register, users will have to type in the code shown on the image. This prevents spam from automated bots, and increase security. Features 管理员可以设置在哪些情况下需要输入验证码。 Administrator can specify where the Captcha should be displayed. 管理员可以选择验证码的字符类型:字母、数字、混合或者中文。 Administrator can select the Captcha type from the options available – Alphanumeric, Alphabets, Numbers or Chinese characters. 管理员可以选择验证码的字母类型:大写、小写或大小写混合。 Administrator can select the letters type from the options available – Capital letters, Small letters or Both. Requirements 生成验证码的 ‘imagettftext()’ 函数需要 gd 库和 FreeType 支持。您可以通过执行 ‘php -m’ 或 ‘phpinfo()’ 检查 php 是否具有此拓展,以确保验证码能够正确显示。 PHP gd2 extension is required. You can run ‘php -m’ or use ‘phpinfo()’ to check if it’s installed properly. 为了避免出现安全问题,建议将 PHP 更新至 7.4 以上的版本,WordPress 更新至最新版本。 Upgrade your PHP and WordPress to the latest version to avoid security vulnerabilities. Support 感谢您下载安装这个插件。您可以通过氪金来支持我们继续开发。博客页面: Thanks for downloading and installing this plugin. You can show your appreciation and support future development by donating. Blog page: WordPress中文验证码 Development Active development of this plugin is handled on GitHub. Translation of the plugin into different languages is on the translation page. Note 如果您发现了任何 BUG,请通过上方的 GitHub 仓库页面进行报告,这样我们才能尽快修正。 If you find any bugs, please report in the GitHub repository above, so that it will be fixed as soon as possible. 如果您认为可以增加新功能,请通过上方的 GitHub 仓库页面给我们建议。 If you think any feature adding to this plugin can improve its features, please recommend it in the GitHub repository above. Known Issues 本插件使用了 SESSION 存储用户信息,这可能造成性能瓶颈。建议通过在 php.ini 中设置 session.save_handler 为 redis 或 memcached(均需要安装拓展),以提升性能。 This plugin uses SESSION to save user information, you can configure redis or memcached server in your php.ini for better performance. TODO List 设置黑名单(根据用户名,或者 IP 地址) Blocklist 允许用户选择下载字体库 Provide more user selectable fonts Credits 本项目从 Vinoj Cardoza 的 Captcha Code,BestWebSoft 的 Google Captcha 和 Sola 的 User Generate Password 插件中获得了灵感。这些项目的重要信息摘录如下: This plugin is inspired by some other plugins. More information about them is listed below: Plugin Name: Captcha Code Plugin URI: https://cn.wordpress.org/plugins/captcha-code-authentication/ Description: Adds Captcha Code anti-spam methods to User front-end WordPress forms. Author: Vinoj Cardoza Author URI: https://www.cardozatechnologies.com License: GPL2 Plugin Name: Google Captcha (reCAPTCHA) by BestWebSoft Plugin URI: https://cn.wordpress.org/plugins/google-captcha/ Description: Protect WordPress website forms from spam entries with Google Captcha (reCaptcha). Author: BestWebSoft Author URI: https://bestwebsoft.com License: GPLv3 or later Plugin Name: User Generate Password Plugin URI: https://www.solagirl.net/wordpress-user-generate-password.html Description: Let user enter password instead of generated by WordPress when sign up. 用户注册时可以输入密码。 Author: Sola Author URI: https://www.solagirl.net License: Unknown