Checkout Bot Shield

Opis

Why it exists

Some bots hit online stores with many checkout attempts in a row. Often they are testing stolen credit card numbers to find ones that work. This brings fake orders, ties up your stock and revenue, and slows your site down for real customers.

What it does

Checkout Bot Shield counts how many times each visitor tries to check out. After 3 attempts within 5 minutes, the next attempt is blocked and the visitor sees „Too many checkout attempts. Please try again later.” The block lifts 5 minutes after their first attempt.

A real shopper who tries to check out more than 3 times in 5 minutes is blocked too.

It works on both the block checkout and the classic checkout page. There is nothing to set up: protection starts as soon as you activate the plugin. Every blocked attempt is recorded in your WooCommerce logs.

Who it is for

WooCommerce store owners who want simple protection against checkout bots, without extra dashboards or settings.

The Pro edition is trusted by 1,000+ stores; this Lite version is a hands-on demo so you can see how it behaves before upgrading.

Requirements

  • WordPress 6.5 or later.
  • WooCommerce installed and active.
  • PHP 8.2.35 or later. Your hosting provider can confirm this.

How to check it works

  1. Go to your shop and try to check out 4 times within 5 minutes.
  2. The first 3 attempts are not blocked. The 4th shows „Too many checkout attempts. Please try again later.” You can check out again after 5 minutes.
  3. In your dashboard, go to WooCommerce Status Logs and open the file starting with cbshield- to see the blocked attempt.

Instalacja

  1. In your WordPress dashboard, go to Plugins Add New Upload Plugin and upload the plugin’s zip file.
  2. Click Activate. Protection starts right away.
  3. If your site runs behind a CDN or proxy service, read the next section.

Sites behind a CDN or proxy

The plugin tells visitors apart by their internet address (IP address). If your site runs behind a CDN or proxy, your server may see that service’s address instead of each shopper’s. Then all shoppers look like one visitor and can be blocked together.

You don’t need to change anything yourself. Send this message to your hosting provider:

„I’m using the Checkout Bot Shield plugin, which tells visitors apart by their IP address. Please confirm my site sees each visitor’s real IP address. If we use a CDN or proxy, please make sure it is set up securely so visitors can’t fake their address.”

Najczęściej zadawane pytania

Will it slow down my checkout?

No. It only runs a quick check when someone places an order.

Can I change the limit?

Yes. A developer can change the number of allowed attempts with one line of code.

Where can I see blocked attempts?

In your dashboard, go to WooCommerce Status Logs and look for files starting with cbshield-.

Does it send data anywhere?

No. All checks and logs stay on your site.

Recenzje

Wtyczka nie ma jeszcze żadnej recenzji.

Kontrybutorzy i deweloperzy

„Checkout Bot Shield” jest oprogramowaniem open source. Poniższe osoby miały wkład w rozwój wtyczki.

Zaangażowani

Rejestr zmian

2.0.0 – 27.10.2026

  • New: Protects the classic checkout page too.
  • Improved: Stronger protection against bots that try to get around the limit.
  • Improved: Real shoppers are less likely to be blocked by mistake.
  • Improved: Every blocked attempt now shows up in the logs.
  • Fix: An error that could appear during some bot attacks.

1.0.1 – 31.05.2026

  • Confirmed compatibility with WordPress 7.0.

1.0.0 – 02.01.2026

  • Initial release: limits repeated checkout attempts and records them in the WooCommerce logs.