Spam Destroyer is a WordPress plugin designed to annihilate comment spam on your website. This plugin uses a combination of JavaScript and PHP to verify the authenticity of comments.
- Cookie-based verification
- JavaScript key validation
- Easy to use, zero config
The plugin employs two methods for spam prevention: altering a hidden input field via JavaScript and setting a cookie. Both are verified on the backend; incorrect implementation leads to the form being marked as spam and rejected. Most spam bots don't execute JavaScript, making them easily detectable due to the absence of the input field and cookie.
In tests, Spam Destroyer proved 20x more effective than Akismet. While both can be used simultaneously, they employ different anti-spam strategies. For servers burdened by spam, is preferable to use Spam Destroyer as well as Aksimet, as it blocks spam before hitting your WordPress database, reducing Akismet's workload.
Unlike the stable release, this version does not include a fall-back CAPTCHA for when a user may fail the CAPTCHA due to a browser or general site problem. It also doesn't include support for bbPress, WP multisite, BuddyPress, Jetpack contact forms etc.
- Download the plugin and extract it.
- Upload the
spam-destroyerfolder to the/wp-content/plugins/directory. - Activate the plugin through the 'Plugins' menu in WordPress.
Note: Once this becomes stable, it will also be available through both Composer and the official WordPress plugin repository.
After activation, the plugin works automatically. No configuration needed.
assets/kill-spam.js: Handles client-side spam validation.index.php: Main file that initializes the plugin and contains the class autoloader.src/class-links.php: Adds helpful links in admin panel.src/class-asset-loading.php: Manages asset loading.src/class-catcher.php: Contains spam prevention logic.src/class-set-keys.php: Handles key generation and settings.src/class-spam-checking.php: Responsible for checking comments.src/class-factory.php: Factory class for object creation.src/class-shared.php: Shared settings and data.composer.json: Implements Composer, but this is an alpha build, so not in WordPress repo yet.phpcs.xml: States that the plugin uses the official WordPress coding standards.uninstall.php: Removes data on uninstall.
spam_destroyer_cookie_lifetime: Modify the cookie expiry time.
If you'd like to contribute, please fork the repository and submit a pull request.
Ryan Hellyer [email protected]
Copyright © Ryan Hellyer
This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/.