Spam Blocker

A number of WordPress spam blocking plugins send comment data to a third party service to check for spam. This is so that they can use machine learning or other automated checks - however this doesn't respect users privacy. So I have built a very simple spam blocker.

The spam blocker does the following things.

Improves the WordPress Comment Blacklist

The comment blacklist is an automated method for blocking keywords that is surprisingly powerful. I have updated the blacklist to use the content from the WordPress Comment Blacklist.

Url Honeypot

Checks a hidden url field to see if any content has been added.

Key Honeypot

Checks a hidden key field to see if the automated key has been changed.

Javascript Check

On form submit javascript adds a new field that must exist. This has the side-effect of requiring users to have javascript enabled, however if they don't the comment will be added to the spam folder so can still be approved. Inspired by this post from David Walsh, but uses a slightly different approach.

Privacy focused Alternatives

The Toolbelt spam checker should be fine for most needs, but if you need something more robust then you may like:

• Anti Spam Bee
• WordPress Zero Spam