AntiSpam Wizard 1.0.0 is out. It is the first public release of an offline-first spam filter for WordPress comments and Contact Form 7 submissions: ten configurable checks, nothing sent anywhere, and personal data handled through the WordPress Privacy API.
What is in 1.0.0
- Honeypot, submit-time, stop words, links, emoji, spacing, multi-language and duplicate comment checks.
- A Naive Bayes spam classifier with a configurable threshold and dynamic learning: mark comments as spam or ham from the admin panel and it retrains.
- A cosine similarity check that compares comments against known spam samples.
- An excluded tokens tab for tokens the Bayesian and similarity checks should ignore, and a configurable minimum message length that skips the heavy checks on short comments.
- Contact Form 7 integration: when CF7 is active, all enabled checks run on form submissions and flagged ones are blocked through CF7’s native spam handling.
- Personal data export and erasure via the WordPress Privacy API, covering both comments and form submissions.
- Spam log and statistics, collapsible help for every setting, and an admin interface translated into nine languages.
Installing
Install it from the WordPress.org plugin directory, or upload the plugin folder to wp-content/plugins/ and activate it from the Plugins menu. Settings live under the AntiSpam Wizard menu in the admin sidebar. It requires WordPress 6.4 or newer and PHP 8.1 or newer.
What it stores, and how to remove it
For a flagged submission the plugin keeps a short text fragment, a SHA-256 hash of the IP address and, for Contact Form 7, a salted SHA-256 hash of the email. Raw IPs and emails are never stored. Tools → Export Personal Data and Erase Personal Data cover this data, and uninstalling the plugin removes all of it.
Tell us what you think
Comments on this post are open, and they are filtered by AntiSpam Wizard itself. Report false positives, ask questions, or say hello. Bug reports and feature requests are welcome here too.
Leave a Reply