Comment Blacklist Updater vs Simple CAPTCHA with Cloudflare Turnstile

Updates the “Comment Blacklist” in Settings / Discussion with a list terms from a remote or local source. By default it get’s the data from Github (“wordpress-comment-blacklist“) by Grant Hutchinson) but you can also get them from any URL or from a local blacklist.txt file. This plugin is an enhanced version of the plugin Comment Blacklist Manager. We decided to create this enhanced version of the plugin, because we wanted to be able to add blacklists without using filters and directly from the WordPress administration. You can still use a filter to modify the blacklist sources if that is more convienient for you. And we also wanted to have more information about the plugin in SETTINGS / DISCUSSION; for example when the blacklist was updated and when it will be updated next time, when the blacklist sources were updated, etc. You can configure three sources for your blacklists: Default blacklist (which can be disabled): wordpress-comment-blacklist by Grant Hutchinson). Please keep in mind that if there is no other blacklist source defined, this will be used as default, even if it\’s not selected. Blacklist from remote URL: You paste the URL to the blacklist and if the file exists and can be accesed (must return code 200) it will be used as a blacklist source. If you want to include a local blacklist for the site, you can upload a blacklist.txt file to the UPLOADS folder and it will also be taken into account. The blacklist.txt file has to be in the root of the UPLOADS folder; it will not be recognized if it\’s for example in /uploads/2025/12/ and the file has to be accesible via http/https (if the access to the file is protected it can\’t be used). And you can use the filter cblm_sources to replace all the blacklists or to add more. If you replace all blacklists with the filter, the settings done in the WordPress administration will be ignored. We decided to keep the same filter as used by “Comment Blacklist Manager” to make it easy to switch between both plugins. Please note: After the September 2023 update only users with administrator privileges can use this plugin. If you’re not an admin you will get following error: “You do not have sufficient permissions to access this page”. What can I do with this plugin? The plugin updates the “Comment Blacklist” in Settings / Discussion with a list terms from a remote or local source. By default it get’s the data from Github (“wordpress-comment-blacklist by Grant Hutchinson) but you can also get them from any URL or from a local blacklist.txt file. Why do I want to update the “Comment Blacklist” in Settings / Discussion? If you want to reduce spam received in your comment forms but also in your contact forms (for example when using Contact Form 7), using blacklisted terms can help. Contact Form 7 encourages to use: Akismet, reCaptcha and the comment blacklist to reduce contact form spam. Contact Form 7 supports spam-filtering with Akismet. Intelligent reCAPTCHA blocks annoying spambots. Plus, using comment blacklist, you can block messages containing specified keywords or those sent from specified IP addresses. The best way to reduce the contact form 7 spam is to use a very extensive term database which is updated regulary with new spam terms. And this plugin does exactly this: Updating the blacklist regularly. Why are you using the “Comment Blacklist for WordPress” from Grant Hutchinson as default source for the blacklist? Since 2011 Grant Hutchinson has been identifying and compiling over 34,000 phrases, patterns, and keywords commonly used by spammers and comment bots in usernames, email addresses, link text, and URIs. His blacklist is very extensive and that’s why we love it. As with all compilations, this blacklist is a work in progress and it is updated more or less every month. And each of these updates will be included automatically with the update process that runs every 24 hours. Sometimes simple is better. If you know another source that is as extensive as this one, drop us a message and we will check if it’s interesting to add it also as a default. System requirements PHP version 5.6 or greater. Comment Blacklist Updater Plugin in your Language! This first release is avaliable in English and Spanish. In the “languages” folder we have included the necessary files to translate this plugin. If you would like the plugin in your language and you’re good at translating, please drop us a line at Contact us. Further Reading You can access the description of the plugin in Spanish at: Actualizador lista negra de comentarios | WordPress Plugin. Contact For further information please send us an email.

Easily add Cloudflare Turnstile to all your WordPress website forms to protect them from spam! A user-friendly, privacy-preserving reCAPTCHA alternative. 100% free! Supported Forms You can currently enable Turnstile on the following forms: WordPress Login Form Registration Form Password Reset Form Comments Form WooCommerce Checkout Pay For Order Account Details Form Login Form Registration Form Password Reset Form Form Plugins WPForms Fluent Forms Contact Form 7 Gravity Forms Formidable Forms Forminator Forms Jetpack Forms Kadence Forms SureForms Other Integrations Elementor Pro Forms Easy Digital Downloads Forms Paid Memberships Pro Forms Mailchimp for WordPress Forms MailPoet Forms BuddyPress Registration Form bbPress Create Topic & Reply Forms MemberPress Forms Ultimate Member Forms WP-Members Forms WP User Frontend Forms WP User Manager Forms wpDiscuz Comments Form CheckoutWC & Flux Checkout Sunshine Photo Cart This plugin is also compatible with WordPress Multisite, and most two-factor authentication (2FA) plugins. Other Features The plugin includes several other features and options: Theme: Select the default theme for Turnstile. Language: Set the default language for Turnstile. Appearance Mode: Choose if Turnstile is always displayed, or only when an interaction is required. Disable Submit Button: Disable the submit button on forms until the Turnstile challenge is completed. Custom Error Message: Set your own custom error message for failed submissions. Whitelist: Prevent Turnstile from showing for logged in users, or certain IP addresses (wildcards are not supported). Resource Hint (Preconnect): Option to enable resource hint preconnect for improved performance. Failsafe Mode: Option to enable failsafe mode. When Cloudflare is down, this mode will either allow submissions, or fallback to reCAPTCHA. Debug Logging: Enable debug logging of Turnstile form submission events to help with troubleshooting. Getting Started It’s super quick and easy to get started with Cloudflare Turnstile! Simply generate a “site key” and “secret key” in your Cloudflare account, and add these in the plugin settings page. Select which forms Turnstile should be added to and click save. Finally, click the “TEST API RESPONSE” button to make sure the Turnstile API response is working OK. A new Cloudflare Turnstile challenge will then be displayed on your selected forms to protect them from spam! For more detailed instructions, please see our setup guide. What is Cloudflare Turnstile? Cloudflare Turnstile delivers frustration-free, CAPTCHA-free web experiences to website visitors. Turnstile is an anti-spam filter that stops abuse and confirms visitors are real without the data privacy concerns or awful UX that CAPTCHA thrusts on users. Learn more here: https://www.cloudflare.com/en-gb/products/turnstile/ Is it free to use? Yes, this plugin is completely free with no paid version, and does not include any additional data tracking. Cloudflare Turnstile is also a completely free service. Plugin Languages Currently available in 14 languages. Thank you to all the contributers! If you would like to help contribute translations, please click here. Other Information For help & suggestions, please create a support topic. Follow the developer @ElliotSowersby on Twitter. View on GitHub Support The Plugin If you would like to support the continued development and support of this plugin, you can make a donation. Trademark Notice Cloudflare, the Cloudflare logo, and Cloudflare Workers are trademarks and/or registered trademarks of Cloudflare, Inc. in the United States and other jurisdictions. This plugin is not affiliated with, endorsed, or sponsored by Cloudflare, Inc.