Title: GB Anti-Spam for Contact Form 7 Author: gregbialowas Published: 1 junho, 2026 Last modified: 2 julho, 2026 --- Pesquisar plugins ![](https://ps.w.org/gb-anti-spam-for-contact-form-7/assets/banner-772x250.jpg?rev =3665275) ![](https://ps.w.org/gb-anti-spam-for-contact-form-7/assets/icon-256x256.jpg?rev =3665275) # GB Anti-Spam for Contact Form 7 Por [gregbialowas](https://profiles.wordpress.org/gregbialowas/) [Baixar](https://downloads.wordpress.org/plugin/gb-anti-spam-for-contact-form-7.2.1.0.zip) * [Detalhes](https://br.wordpress.org/plugins/gb-anti-spam-for-contact-form-7/#description) * [Avaliações](https://br.wordpress.org/plugins/gb-anti-spam-for-contact-form-7/#reviews) * [Instalação](https://br.wordpress.org/plugins/gb-anti-spam-for-contact-form-7/#installation) * [Desenvolvimento](https://br.wordpress.org/plugins/gb-anti-spam-for-contact-form-7/#developers) [Suporte](https://wordpress.org/support/plugin/gb-anti-spam-for-contact-form-7/) ## Descrição GB Anti-Spam for Contact Form 7 adds a lightweight security layer to Contact Form 7 forms without CAPTCHA. Features: * Honeypot field protection * Timing-based bot detection * Request integrity token * IP rate limiting * Automatic injection (no manual form editing required) Designed to be lightweight and compatible with caching and performance plugins ## Instalação 1. Upload plugin to WordPress 2. Activate plugin 3. Works automatically with all Contact Form 7 forms ## Perguntas frequentes ### Does it require editing forms? No. Everything is injected automatically. ### Does it slow down the site? No noticeable impact. ## Avaliações Não há avaliações para este plugin. ## Colaboradores e desenvolvedores “GB Anti-Spam for Contact Form 7” é um programa de código aberto. As seguintes pessoas contribuíram para este plugin. Colaboradores * [ gregbialowas ](https://profiles.wordpress.org/gregbialowas/) [Traduzir o “GB Anti-Spam for Contact Form 7” para seu idioma.](https://translate.wordpress.org/projects/wp-plugins/gb-anti-spam-for-contact-form-7) ### Interessado no desenvolvimento? [Navegue pelo código](https://plugins.trac.wordpress.org/browser/gb-anti-spam-for-contact-form-7/), consulte o [repositório SVN](https://plugins.svn.wordpress.org/gb-anti-spam-for-contact-form-7/) ou assine o [registro de desenvolvimento](https://plugins.trac.wordpress.org/log/gb-anti-spam-for-contact-form-7/) por [RSS](https://plugins.trac.wordpress.org/log/gb-anti-spam-for-contact-form-7/?limit=100&mode=stop_on_copy&format=rss). ## Registro de alterações #### 2.1.0 * Refactored core validation into structured pipeline architecture (validate() now acts as orchestration layer) * Introduced modular detection stages: context collection, honeypot, timing, nonce, fingerprint, rate limiting, field analysis, payload analysis, scoring, and final decision * Replaced flat string-based signals with structured signal objects (type + optional field metadata) * Added unified scoring engine with centralized weight map for all detection signals * Introduced hard-block vs score-based decision separation (critical threats bypass scoring) * Split validation logic into dedicated methods for each detection layer for improved maintainability * Improved field-level analysis with structured output (URL, emoji, markup, Cyrillic, length detection per field) * Introduced dedicated payload analysis layer for cross-field pattern detection( SQL injection, XSS, command injection, spam keywords) * Centralized spam keyword detection into reusable helper method * Improved rate limiting mechanism with explicit signal output (rate_limited) * Added structured debug logging including score value alongside signals, IP, user agent, and sanitized submission data * Enhanced logging safety with improved data sanitization and truncation limits * Improved observability of validation flow through explicit stage separation and consistent signal output format * Reduced coupling between detection logic and validation decision logic * Maintained backward compatibility with existing Contact Form 7 validation filter #### 2.0.0 * Complete redesign of anti-spam engine architecture * Replaced legacy scoring system with structured signals-based detection model * Introduced unified signals[] system as primary validation output * Split validation logic into layered detection system (hard-block, behavioral signals, content analysis) * Added per-field validation engine via analyze_field() method * Introduced helper-based security detection functions (SQL injection, XSS, command injection) * Added structured JSON logging system for all CF7 submission attempts * Improved rate limiting mechanism based on IP tracking * Added detection for URLs, emojis, HTML/BBCode markup, and Cyrillic content * Separated detection logic from final blocking decision * Improved observability with detailed request-level debug output * Prepared internal architecture for future rule weighting and per-field validation engine expansion * Improved overall maintainability and extensibility of the plugin core #### 1.2.0 * Major refactor of anti-spam engine * Added hard firewall layer using wpcf7_before_send_mail * Introduced unified payload inspection (email, URL, injection patterns) * Removed client-side hash-based token system in favor of WP nonce * Improved scoring logic and reduced redundant validation checks * Fixed CF7 bypass allowing spam submissions to reach mail layer * Improved debug logging system with configurable file path #### 1.1.0 * Replaced JS-based token mechanism with secure WordPress nonce validation (wp_create_nonce/ wp_verify_nonce) * Removed insecure client-side hash-based token generation * Added human interaction signal detection (mouse, keyboard, touch events) * Improved fingerprinting method for better bot anomaly detection * Added universal payload inspection for SQL injection, XSS, and command injection patterns across all form fields * Improved rate limiting logic with stricter thresholds per IP * Enhanced honeypot detection reliability across all CF7 forms #### 1.0.5 * Improved validation scoring system for spam detection * Added additional heuristic checks for automated bot submissions * Optimized transient-based rate limiting mechanism #### 1.0.0 * Initial release * Basic honeypot protection * Timing-based submission validation * Lightweight fingerprint detection ## Meta * Versão **2.1.0** * Última atualização **4 meses atrás** * Instalações ativas **10+** * Versão do WordPress ** 5.8 ou superior ** * Testado até **7.0.7** * Versão do PHP ** 7.0 ou superior ** * Idioma * [English (US)](https://wordpress.org/plugins/gb-anti-spam-for-contact-form-7/) * Tags * [anti-spam](https://br.wordpress.org/plugins/tags/anti-spam/)[contact form 7](https://br.wordpress.org/plugins/tags/contact-form-7/) [honeypot](https://br.wordpress.org/plugins/tags/honeypot/)[spam protection](https://br.wordpress.org/plugins/tags/spam-protection/) * [Visualização avançada](https://br.wordpress.org/plugins/gb-anti-spam-for-contact-form-7/advanced/) ## Classificações Ainda não foi enviada nenhuma avaliação. [Sua avaliação](https://wordpress.org/support/plugin/gb-anti-spam-for-contact-form-7/reviews/#new-post) [Ver todas avaliações](https://wordpress.org/support/plugin/gb-anti-spam-for-contact-form-7/reviews/) ## Colaboradores * [ gregbialowas ](https://profiles.wordpress.org/gregbialowas/) ## Suporte Problemas resolvidos nos últimos dois meses: 0 de 1 [Ver fórum de suporte](https://wordpress.org/support/plugin/gb-anti-spam-for-contact-form-7/) ## Doar Gostaria de contribuir para o desenvolvimento deste plugin? [ Doe para este plugin ](https://gregbialowas.com/donate)