GhostTrap
GhostTrap provides sophisticated invisible spam protection using a comprehensive 5-layer detection system. Legitimate users comment normally while automated spam is silently blocked through advanced timing analysis, cryptographic validation, and behavioral detection. 5-Layer Protection System Timing Analysis – Detects submissions too fast for human interaction Cryptographic Signatures – Prevents replay attacks and form manipulation Year Validation – JavaScript-enhanced field verification JavaScript Detection – Ensures legitimate browser interaction Honeypot Fields – Multiple hidden traps catch automated bots Professional Features Enhanced Admin Interface – Professional statistics dashboard with custom branding Real-time Statistics – Track protection effectiveness with detailed blocking metrics Configurable Timing – Adjust detection sensitivity from 5-300 seconds WordPress 6.4+ Compatible – Full support for block themes and FSE Admin Bar Integration – Quick spam statistics for administrators Screen Options Control – User-configurable interface elements Zero User Friction All protection operates invisibly – no captcha, no puzzles, no delays. Users with JavaScript enabled see normal comment forms, while those with disabled JavaScript get simple year validation. Protection effectiveness remains high in both scenarios. Performance Optimized Lightweight JavaScript – Only 2KB, loads exclusively on comment pages Smart Script Loading – Conditional loading based on comment form presence Minimal Database Impact – Efficient storage with optional spam archiving Browser Compatibility – Works across all modern browsers with graceful degradation GDPR Compliant No external services, no tracking, no personal data collection beyond standard WordPress comment processing. All spam detection happens locally on your server. Attribution Built upon the original Anti-spam plugin foundation by webvitaly, with comprehensive modernization, enhanced detection layers, and professional admin interface for current WordPress compatibility. Privacy Policy GhostTrap operates with privacy-first design principles: No External Services – All spam detection processing occurs on your server No Personal Data Collection – Uses only standard WordPress comment data for protection No Tracking or Analytics – Zero data sharing with third parties or external systems GDPR Fully Compliant – Minimal data processing with transparent, local-only operation Optional Spam Storage – Blocked comments stored locally only if explicitly enabled Advanced Configuration Timing Threshold Recommendations High Security Sites: 10-15 seconds (stricter protection) General Purpose Sites: 15-20 seconds (balanced protection) Accessibility-Focused Sites: 25-30 seconds (accommodates slower interaction) Reading-Heavy Sites: 30+ seconds (allows time for content review) Admin Interface Customization Admin Bar Statistics – Toggle spam counter visibility in admin bar Screen Options – Control information panel display on comments page Dashboard Integration – Spam statistics in “At a Glance” widget Contextual Help – Comprehensive protection information in WordPress help system Technical Requirements Server Environment: * WordPress 5.0 or higher * PHP 7.4 or higher * Standard WordPress hosting with wp_options table access Browser Support: * All modern browsers (Chrome, Firefox, Safari, Edge) * Internet Explorer 11+ with graceful degradation * Mobile browsers with full functionality * JavaScript-disabled browsers with fallback protection Performance Specifications: * JavaScript payload: ~2KB minified and compressed * Database impact: Single option row with minimal queries * Server processing: Sub-millisecond detection analysis * Memory usage: Negligible footprint during comment processing
Stop Signup Spam
Stop Signup Spam will prevent user registration of anyone trying to sign up with an the email address or IP address that has been reported to Stop Forum Spam. Contrary to what the name implies, Stop Forum Spam can be used with any web service, not just forums. At this time, Stop Signup Spam integrates with: The core WordPress registration form Restrict Content Pro MemberPress Give By installing this plugin, you consent to an API call sent from your WordPress site to Stop Forum Spam after every attempted user registration. The API call includes the user’s email address and IP address. It is a similar concept to Akismet, except instead of checking for blog comment spam, it checks for user signup spam. Unlike Akismet, no API key is required to query Stop Forum Spam’s database. Partly because of this, I decided not to include a settings page in the Stop Signup Spam plugin. Just activate and you are all set. The plugin does not log any user registration info. Any data sent to Stop Forum Spam would fall under their privacy policy. Please note that Stop Forum Spam is a third-party service that I have no affiliation with. I just found it, could not find any existing WordPress plugins that worked with it, and built one myself. It has helped me cut down on signup spam on a free membership site that I run, and I hope it will help you do the same.
