Zero Spam for WordPress

توسط Ben Marshall

Protect your WordPress website seamlessly with Zero Spam for WordPress! Eliminate spam and malicious attacks that can harm your online presence. Our plugin integrates effortlessly with Zero Spam, Stop Forum Spam, and Project Honeypot to offer a strong defense system.

Rest easy knowing that we utilize multiple detection methods to swiftly identify and halt potential threats. Whether it’s pesky spam, devious trolls, or cunning hackers, Zero Spam is here to protect your website.

Worry-free, Powerful Protection at Your Fingertips

No captchas or moderation queues — no longer a admin’s problem.
Our system dynamically blocks threats, keeping your site safe.
Integration with global IP reputation providers for enhanced security.
Block IPs temporarily or permanently, keep unwanted visitors out.
Geolocation tracks origins of threats, providing valuable insights.
Ability to block countries, regions, zip/postal codes & cities.
REST API for programmatic settings management — perfect for CI/CD, staging syncs, and automation.
Utilize splorp’s Comment Blacklist to strengthen your disallowed list.
Block disposable & malicious email effortlessly with disposable.
Multiple techniques, including the renowned solution by David Walsh.

Seamlessly integrates with popular plugins including:

WooCommerce — Secure customer registrations.
GiveWP — Prevents attempts to test stolen credit cards.
ProfilePress — Keeps registrations safe & secure.
Mailchimp for WordPress — Protects sign-ups from abuse.
Gravity Forms, Contact Form 7, WPForms, Formidable Form Builder, Fluent Forms, wpDiscuz — Versatile form protection.

With Zero Spam for WordPress, you not only get exceptional protection but also a reliable support that ensures your peace of mind.

Enhance Detection with Optional 3rd-Party Integrations

Zero Spam for WordPress can integrate optional services for enhanced spam detection. Before using these, we recommend reviewing their terms and privacy policies.

Zero Spam – Utilize our real-time IP reputation analysis. Take a look at our Privacy Policy and Terms of Use for more details.
ipbase.com – Access detailed geolocation information of attackers. Familiarize yourself with their Privacy Policy & Terms of Use.
ipinfo.io – Gather geolocation details of malicious users. Refer to their Privacy Policy & Terms of Use for further information.
ipstack – Obtain extensive geolocation insights. Review their Privacy Policy & Terms of Use to learn more.
Stop Forum Spam – Verify if visitors’ IPs have been reported. Explore their Privacy Policy and Terms of Use for additional details.
Project Honeypot – Check if visitors’ IPs have been flagged. Refer to their Privacy Policy and Terms of Use for more information.
Google Maps – Plot attack locations on Google Maps. Please review their Privacy Policy & Terms of Use for complete details.

Additionally, you have the option to contribute to Zero Spam’s improvement by enabling the sharing of detection information. For further information on the shared data, kindly refer to our FAQ.

Upload the entire zero-spam folder to the /wp-content/plugins/ directory.
Activate the plugin through the Plugins screen (Plugins > Installed Plugins).
Visit the plugin setting to configure as needed (Settings > Zero Spam).

For more information & developer documentation, see the wiki.

سوالات متداول

Does Zero Spam for WordPress block user IPs?

Not on its own. Zero Spam for WordPress does not automatically block IP addresses. If a visitor is blocked, it could be due to manual blocking by the site admin or their presence in IP blacklists such as Stop Forum Spam, Project Honeypot, or the Zero Spam.

In the event that a legitimate user is blocked, refer to the Log (Admin > Dashboard > Zero Spam > Log) for further details on the reason behind the block. You have the flexibility to adjust the strictness of the 3rd-party blacklist checks or disable them if your users are prone to being flagged as spam or malicious.

Does Zero Spam for WordPress check Jetpack comments?

No, it doesn’t. Zero Spam for WordPress does not have integration with Jetpack. If you have any inquiries regarding this, please refer to https://wordpress.org/support/topic/incompatible-with-jetpack-comments for more details.

How do I boost performance of Zero Spam for WordPress?

Enable caching for optimal performance. Enabling caching is highly recommended as it helps prevent repetitive calls to third-party APIs and access checks during each page visit.

To further optimize performance, you can adjust the cache and API timeout settings in the admin panel based on your server specifications and specific requirements.

Does Zero Spam support WP-CLI commands?

wp zerospam autoconfigure — Auto-configures with recommended settings.
wp zerospam settings — Displays all plugin settings.
wp zerospam set --[SETTING_KEY]=[VALUE] — Updates a plugin setting.

Can I manage Zero Spam settings programmatically?

Yes! Zero Spam provides a secure REST API for reading and updating settings remotely. This is perfect for:

Syncing settings between staging and production environments
Automating configuration in CI/CD pipelines
Managing settings across multiple WordPress sites
Remote administration and monitoring
Testing configuration changes safely with dry-run mode

The API supports multisite installations with granular control over network defaults and per-site overrides. Authentication uses WordPress Application Passwords for secure, revocable access without exposing your main password.

Getting Started: Visit the Documentation tab in Settings > Zero Spam for complete details, step-by-step setup instructions, real-world examples, and troubleshooting tips. No technical expertise required!

Are you getting a `ftp_fget` PHP warning?

Some hosts have issues with they way they access files. If you’re seeing a ftp_fget PHP notice, setting the FS_METHOD constant to direct in wp-config.php above the line /* That's all, stop editing! Happy Pressing. */ should solve the problem:

define('FS_METHOD', 'direct');

If hosting with Pantheon, see their known issues page for more information and what to do to resolve it with their $_ENV['PANTHEON_ENVIRONMENT'] variable check.

Where do I report security bugs found in this plugin?

You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. Report a security vulnerability.

I blocked myself! How do I get back in?

If you have defined the ZEROSPAM_RESCUE_KEY constant in your wp-config.php file, you can bypass all checks by appending ?zerospam_rescue={YOUR_KEY} to any URL. (e.g., https://example.com/wp-admin/?zerospam_rescue=mysecretkey).

If you haven’t defined this key, you must manually rename the plugin folder via FTP (wp-content/plugins/zero-spam -> zero-spam-disabled) to gain access.