Extended honeypot anti-spam protection
WP Armour Extended expands the honeypot anti-spam approach used by WP Armour – Honeypot Anti Spam. It is designed to help block spam submissions across WordPress forms and systems without placing a CAPTCHA or extra verification field in front of users. The plugin uses JavaScript to insert a honeypot field into forms, while spam bots that cannot use JavaScript cannot fill that field to pass the anti-spam test.
The underlying WP Armour protection is available for WordPress comments and registration, BBPress forums, and a range of form plugins, themes, reviews, and membership tools. WP Armour Extended adds further controls for reviewing submissions, responding to repeated activity, and filtering unwanted content.
Paid capabilities
- Spam submission records: Record spam submissions and view what spam bots are trying to submit.
- IP logging: Log the IP addresses associated with spam bot activity.
- IP blocking: Block spam bot IPs when multiple submissions come from the same address.
- Additional IP filtering: Add an extra level of anti-spam filtering based on IP addresses.
- Spam keyword filtering: Mark submissions as spam when they contain specified words or phrases.
These tools give administrators more visibility into unwanted submissions than the basic honeypot workflow alone. Reviewing submitted data can help identify recurring spam patterns, while IP-related controls can address repeated submissions from the same source. Keyword filtering provides another way to flag form entries that contain terms selected by the administrator.
Supported forms and WordPress areas
WP Armour’s protection covers comments, registration, BBPress, Contact Form 7, Gravity Forms, WPForms, Formidable Forms, Caldera Forms, Toolset Forms, Elementor Forms, Fluent Forms, Divi Theme Contact Form, Theme My Login, WooCommerce Reviews Pro, and other listed integrations. The Extended version also supports WooCommerce checkout and registration, including card testing orders, as well as Easy Digital Downloads checkout and registration.
Additional listed integrations include QuForm, Ninja Forms, Ajax-based and multi-step Gravity Forms, MC4WP: Mailchimp for WordPress, S2 Members, Ultimate Members, Bricks Builder Form, BricksForge Pro Form, Beaver Builder Contact Form Module, Strong Testimonials, Formcraft Form, Forminator, WS Form, YITH Easy Login & Register Popup for WooCommerce, UsersWP, Youzify, MailPoet, Brevo, JetForm Builder, HTMLform, the Avia Enfold Theme, BuddyPress, BuddyBoss, Sure Forms, and Everest Forms.
Practical use cases
Use WP Armour Extended on sites receiving spam through several channels, such as comments, registrations, contact forms, checkout pages, community areas, and email subscription forms. It can also suit websites that need to inspect spam submissions rather than simply discard them, or that want to combine honeypot filtering with IP controls and specified keyword rules.
The plugin is described as GDPR compliant and uses no tracking, cookie storage, or external server calls. It is also presented as working without external API calls such as those used by Akismet or CleanTalk for spam filtering.
Installation and setup
Install WP Armour Extended on the WordPress website and activate it. Review the supported form integrations in use, then configure the available Extended controls for spam records, IP logging, repeated-IP blocking, and keyword filtering. Check recorded submissions and adjust the filtering rules as your site’s spam patterns develop.
