Title: DigitaleZen AntiSpam Shield for CF7 Author: Riccardo Rosignoli Published: 2025-12-08 Last modified: 2026-08-26 --- Szukaj wtyczek ![](https://ps.w.org/digitalezen-antispam-shield-for-cf7/assets/banner-772x250.png? rev=3413878) ![](https://ps.w.org/digitalezen-antispam-shield-for-cf7/assets/icon-256x256.png? rev=3413878) # DigitaleZen AntiSpam Shield for CF7 Autor: [Riccardo Rosignoli](https://profiles.wordpress.org/riccardorosignoli/) [Pobierz](https://downloads.wordpress.org/plugin/digitalezen-antispam-shield-for-cf7.1.1.0.zip) * [Szczegóły](https://pl.wordpress.org/plugins/digitalezen-antispam-shield-for-cf7/#description) * [Recenzje](https://pl.wordpress.org/plugins/digitalezen-antispam-shield-for-cf7/#reviews) * [Instalacja](https://pl.wordpress.org/plugins/digitalezen-antispam-shield-for-cf7/#installation) * [Rozwój](https://pl.wordpress.org/plugins/digitalezen-antispam-shield-for-cf7/#developers) [Wsparcie](https://wordpress.org/support/plugin/digitalezen-antispam-shield-for-cf7/) ## Opis DigitaleZen AntiSpam Shield for CF7 protects Contact Form 7 submissions without adding a CAPTCHA or requiring form-tag configuration. Its checks run through Contact Form 7’s supported spam API and include: * An automatic, visually hidden honeypot. * A site-signed form token with a minimum submission time. * Per-IP and per-email rate limiting. * A local adaptive blacklist that learns site-HMAC email/IP identities only from high-confidence spam signals. * Matching against migrated or locally supplied domain, username, and keyword rules. * Contact Form 7 spam-log integration for every local decision. Blocked-event data is stored in private WordPress database tables. The default privacy mode stores masked email and IP values together with site-specific HMAC identifiers. Events are removed automatically after 30 days by default; administrators can select a retention period from 1 to 365 days. The local reputation threshold is deliberately conservative. Learned entries expire after 90 days without new evidence, and administrators can reset all learned reputation after a suspected false positive. The signed JSON blacklist is rebuilt locally with an atomic replacement and a verified database fallback. It contains no plaintext email or IP address. The dashboard provides local event totals, a text-accessible chart summary, protected CSV export, local-blacklist status, privacy controls, and optional weekly email reports. Weekly reports are disabled by default. When version 1.1.0 upgrades an existing 1.0.0 installation, it first stores a checksum- verified private backup of known legacy files, imports compatible log and blacklist data, and only then removes those files from the public uploads directory. The original private migration backups remain available for administrator-controlled deletion. ### Privacy Blocked events are stored locally in WordPress database tables and are subject to the configured retention period. The plugin registers exporters and erasers with the WordPress personal-data tools and adds suggested privacy-policy text under ** Settings > Privacy**. The reputation table and signed local JSON use site-specific HMAC values for email and IP identities. Those values cannot be reused as a shared cross-site blacklist. The JSON is placed in a randomized plugin directory with Apache/IIS deny rules and a blocking index file; the verified database copy remains the runtime fallback. CSV exports are available only to administrators, require a WordPress nonce, and neutralize spreadsheet formula prefixes. ### External services This plugin does not use an external blacklist, CAPTCHA, analytics endpoint, CDN asset, or other external service. All detection, learning, storage, JSON generation, and scheduled cleanup run on the site that installed the plugin. ## Instalacja 1. Install and activate Contact Form 7 version 6.1.7 or newer. 2. Install and activate DigitaleZen AntiSpam Shield for CF7. 3. Open **CF7 AntiSpam** in the WordPress administration menu. 4. Review retention, privacy, and optional weekly-report settings. No Contact Form 7 form tags or shortcodes need to be added. ## Najczęściej zadawane pytania ### Does it require a CAPTCHA? No. The plugin uses an automatic honeypot, signed timing token, rate limiting, and local adaptive blacklist matching. ### Do I need to edit my Contact Form 7 forms? No. The token and honeypot fields are inserted automatically through Contact Form 7 filters. ### What visitor data is stored? Only submissions classified as spam are logged. By default, the plugin stores the event time, form ID, detection reason, masked email/IP values, and site-HMAC identifiers. Administrators can choose full identity storage, change retention, export retained events, or delete them. ### Does deactivation delete data? No. Deactivation only removes scheduled tasks. Data is deleted during plugin removal only when the administrator has explicitly enabled **Delete all plugin data when the plugin is deleted**. ### Are weekly reports enabled automatically? No. Weekly CSV reports are opt-in and use the email address selected by an administrator. ### Does the blacklist use an external service? No. The plugin creates and updates its signed JSON blacklist on the WordPress site itself. It makes no reputation or blacklist request to DigitaleZen, Google, or another provider. ### How does local learning avoid immediate false positives? Only high-confidence honeypot and repeated rate-limit signals add local reputation evidence. An identity is not promoted to the active blacklist until it reaches the learning threshold. Token errors alone never teach the blacklist, learned entries expire, and an administrator can reset learned reputation. ## Recenzje Wtyczka nie ma jeszcze żadnej recenzji. ## Kontrybutorzy i deweloperzy „DigitaleZen AntiSpam Shield for CF7” jest oprogramowaniem open source. Poniższe osoby miały wkład w rozwój wtyczki. Zaangażowani * [ Riccardo Rosignoli ](https://profiles.wordpress.org/riccardorosignoli/) [Przetłumacz wtyczkę “DigitaleZen AntiSpam Shield for CF7” na swój język.](https://translate.wordpress.org/projects/wp-plugins/digitalezen-antispam-shield-for-cf7) ### Interesuje cię rozwój wtyczki? [Przeglądaj kod](https://plugins.trac.wordpress.org/browser/digitalezen-antispam-shield-for-cf7/), sprawdź [repozytorium SVN](https://plugins.svn.wordpress.org/digitalezen-antispam-shield-for-cf7/) lub czytaj [dziennik rozwoju](https://plugins.trac.wordpress.org/log/digitalezen-antispam-shield-for-cf7/) przez [RSS](https://plugins.trac.wordpress.org/log/digitalezen-antispam-shield-for-cf7/?limit=100&mode=stop_on_copy&format=rss). ## Rejestr zmian #### 1.1.0 * Tested with WordPress 7.1, PHP 8.4, and Contact Form 7 6.1.7. * Replaced public uploads-based logs and counters with private database tables. * Added checksum-verified migration of version 1.0.0 data before public legacy files are removed. * Added masked identity storage by default, configurable retention, privacy exporters/ erasers, and uninstall controls. * Switched spam classification to Contact Form 7’s supported `wpcf7_spam` API and spam log. * Added an automatic honeypot and site-signed timing token without requiring form tags. * Made rate limiting atomic and scoped it to actual submissions. * Replaced the external blacklist feed with a site-local adaptive reputation engine and signed JSON cache. * Added conservative evidence thresholds, automatic reputation expiry, administrator reset, atomic JSON replacement, and a verified database fallback. * Made weekly reports opt-in and stopped deleting retained events after an email attempt. * Added nonce- and capability-protected dashboard actions and formula-safe CSV exports. * Added reproducible PHPCS, PHP compatibility, PHPUnit, and WordPress integration tests. #### 1.0.0 * Initial public release. ## Meta * Wersja **1.1.0** * Ostatnia aktualizacja **2 miesiące temu** * Włączone instalacje **Mniej niż 10** * Wersja WordPressa ** 6.7 lub nowszej ** * Testowano do **7.1.3** * Wersja PHP ** 7.4 lub nowszej ** * Język * [English (US)](https://wordpress.org/plugins/digitalezen-antispam-shield-for-cf7/) * Tagi * [antispam](https://pl.wordpress.org/plugins/tags/antispam/)[blacklist](https://pl.wordpress.org/plugins/tags/blacklist/) [contact form 7](https://pl.wordpress.org/plugins/tags/contact-form-7/)[honeypot](https://pl.wordpress.org/plugins/tags/honeypot/) [spam](https://pl.wordpress.org/plugins/tags/spam/) * [Widok zaawansowany](https://pl.wordpress.org/plugins/digitalezen-antispam-shield-for-cf7/advanced/) ## Oceny Nie przesłano jeszcze żadnych recenzji. [Twoja opinia](https://wordpress.org/support/plugin/digitalezen-antispam-shield-for-cf7/reviews/#new-post) [Zobacz wszystkierecenzje.](https://wordpress.org/support/plugin/digitalezen-antispam-shield-for-cf7/reviews/) ## Zaangażowani * [ Riccardo Rosignoli ](https://profiles.wordpress.org/riccardorosignoli/) ## Wsparcie Masz coś do dodania? Potrzebujesz pomocy? [Zobacz forum wsparcia](https://wordpress.org/support/plugin/digitalezen-antispam-shield-for-cf7/)