Mimic Guard

Descrizione

Mimic Guard is an anti-spam plugin for WordPress mail and contact forms. It uses dynamic honeypots, submission time monitoring, and integration with major form plugins to reduce automated bot submissions.

  • Honeypot — Detects bots that fill hidden form fields
  • Time check — Flags submissions that are unrealistically fast after the form is shown
  • Form integration — Works with WPForms, Contact Form 7, comments, and more
  • Page caching — Optional AJAX honeypot injection when HTML is cached
  • Privacy — Optional IP anonymization when logging events

Configure minimum submission time, token lifetime, log list size, and more from the admin screens.

Installazione

  1. Upload the plugin folder to /wp-content/plugins/mimicguard/ or install from the ZIP file.
  2. Activate Mimic Guard on the Plugins screen in WordPress.
  3. Open the Mimic Guard menu to review settings and logs.

FAQ

I use a full-page caching plugin

Enable “Insert honeypot via AJAX (cache-friendly)” so honeypots can still be loaded even when HTML is cached.

Legitimate submissions are being blocked

Try increasing the minimum submission time slightly, or disable “Require time-check token” if you do not need it.

Where are logs stored?

In a dedicated database table. You can run cleanup from the admin area based on retention settings.

Recensioni

Non ci sono recensioni per questo plugin.

Contributi e sviluppo

“Mimic Guard” è un software open source. Le persone che hanno contribuito allo sviluppo di questo plugin sono indicate di seguito.

Collaboratori

“Mimic Guard” è stato tradotto in 2 lingue. Grazie a chi traduce per il contributo.

Traduci “Mimic Guard” nella tua lingua.

Ti interessa lo sviluppo?

Esplora il codice segui il repository SVN, segui il log delle modifiche tramite RSS.

Changelog

1.3.3

Reduced honeypot false positives from browser/password manager autofill by hardening honeypot field attributes and narrowing dynamic prefix checks; also improved detailed block reason logging and frontend guard checks.

1.3.2

Further hardening for WordPress.org review: sanitize request data used for spam checks, escape admin template output, sanitize server variables for IP logging, Prime Form AJAX callback naming, remove bundled PHPUnit bootstrap from the distribution package.

1.3.1

WordPress.org review: enqueue scripts, sanitization/escaping, readme contributor, translations loading.

1.3.0

Internal improvements, security, and code quality updates.