描述
Tired of deleting spam comments every day? SpamJam is a lightweight, invisible anti-spam solution that blocks automated spam before it hits your database—without annoying your legitimate users with captchas or verification steps.
Why SpamJam?
Unlike traditional anti-spam plugins that rely on third-party services or frustrating captchas, SpamJam uses intelligent honeypot techniques and behavioral analysis to silently eliminate spam bots. Your real visitors won’t see any difference, but spam bots will be stopped cold.
Free Features
✅ Honeypot Protection – Invisible fields that trap spam bots
✅ Referrer Validation – Blocks direct form submissions
✅ Nonce Security – CSRF protection for all comment forms
✅ Smart Blocklist – Filters common spam keywords
✅ Zero Configuration – Works immediately after activation
✅ No Captchas – Never annoy your real users
✅ Lightweight – Minimal impact on site performance
✅ WooCommerce Compatible – Works with HPOS
Pro Features (Premium)
🚀 Registration Spam Protection – Protect user registration forms with email verification
🚀 Premium Blocklist – Auto-updating list of 15,000+ spam terms
🚀 Custom Blocklist – Add your own keywords and patterns to block
🚀 Geographic Blocking – Block comments from specific countries
🚀 IP Blocking – Block specific IP addresses or ranges
🚀 Rate Limiting – Prevent spam floods with configurable limits
🚀 Email Whitelist – Always allow trusted email addresses
🚀 Spam Logging & Analytics – Track and analyze blocked spam attempts
🚀 Content Validation – Set minimum comment length and maximum links
🚀 Contact Form Protection – Protect Contact Form 7, WPForms, Gravity Forms
🚀 User Enumeration Blocking – Enhanced security against attacks
🚀 Priority Support – Get help when you need it
Perfect For
- Blogs with active comment sections
- Membership sites
- WooCommerce stores
- Community websites
- Any WordPress site tired of spam
How It Works
SpamJam uses multiple layers of protection:
- Honeypot Fields – Hidden form fields that only bots fill out
- JavaScript Validation – Ensures forms are submitted by real browsers
- Referrer Checking – Verifies submissions come from your site
- Hash Validation – Cryptographic verification of form integrity
- Keyword Filtering – Blocks known spam patterns
All of this happens invisibly in the background. Your legitimate users never see a captcha or verification step.
Privacy First
SpamJam doesn’t send your data to third-party services. Everything happens on your server, keeping your users’ information private and your site GDPR-compliant.
安装
Automatic Installation
- Log in to your WordPress admin panel
- Go to Plugins Add New
- Search for “SpamJam”
- Click “Install Now” and then “Activate”
- That’s it! SpamJam is now protecting your site
Manual Installation
- Download the plugin ZIP file
- Go to Plugins Add New Upload Plugin
- Choose the ZIP file and click “Install Now”
- Activate the plugin
- SpamJam starts working immediately—no configuration needed!
After Activation
SpamJam works automatically with zero configuration. For Pro features, visit SpamJam in your WordPress admin menu to configure advanced options.
常见问题
-
Do I need to configure anything?
-
No! SpamJam works immediately after activation. Just install, activate, and forget about spam.
-
Will this slow down my site?
-
No. SpamJam is extremely lightweight and uses efficient caching. Most users see zero performance impact.
-
Will my users see captchas?
-
Never. SpamJam is completely invisible to legitimate users. No captchas, no verification steps, no friction.
-
Does this work with my theme?
-
Yes! SpamJam works with any WordPress theme that uses standard comment forms. It’s compatible with popular themes like Astra, GeneratePress, OceanWP, and more.
-
Is this compatible with WooCommerce?
-
Yes! SpamJam is fully compatible with WooCommerce and supports High-Performance Order Storage (HPOS).
-
What’s the difference between Free and Pro?
-
The free version protects comment forms with honeypots, nonce validation, and basic blocklists.
Pro adds 10+ advanced features including:
– Registration form protection with email verification
– Premium auto-updating blocklist (15,000+ terms)
– Custom blocklist for your specific needs
– Geographic and IP blocking
– Rate limiting to prevent spam floods
– Email whitelist for trusted users
– Spam logging and analytics
– Content validation rules
– Contact form protection (CF7, WPForms, Gravity Forms)
– Priority support -
How does geographic blocking work?
-
Pro users can block comments from specific countries by entering country codes (e.g., CN, RU, UA). This uses IP geolocation to identify the commenter’s country and blocks them before they can submit spam.
-
What is rate limiting?
-
Rate limiting prevents spam floods by limiting how many comments a single IP address can submit within a time period. For example, you can set it to allow maximum 5 comments per hour per IP address.
-
Can I see what spam was blocked?
-
Yes! Pro users can enable spam logging to track all blocked attempts. You can see IP addresses, countries, blocked content, and reasons for blocking. Logs are automatically cleaned up based on your retention settings.
-
Does this work with other anti-spam plugins?
-
SpamJam can work alongside other plugins, but for best results, we recommend using it as your primary anti-spam solution to avoid conflicts.
-
How effective is SpamJam?
-
SpamJam blocks 99%+ of automated spam bots. The multi-layered approach catches what single-method solutions miss.
-
Do you offer support?
-
Yes! Free users can get community support through WordPress.org forums. Pro users get priority email support.
-
Is my data sent to third parties?
-
No. SpamJam processes everything on your server. Your data stays private and GDPR-compliant.
评价
此插件暂无评价。
贡献者及开发者
更新日志
2.2.2 – 2026-05-29
- Fixed – Wrapped all plugin functions inside the Freemius function_exists guard to prevent “Cannot redeclare” fatals when free and premium builds load together during an upgrade switch (F1)
- Fixed – Comment form action now sets the sj5 token on DOMContentLoaded instead of on scroll, so legitimate commenters who never scroll are no longer blocked with “Form validation failed” (F2)
- Security – sj5 HMAC token is now time-boxed and rotates hourly (accepts current and previous window) to prevent indefinite token replay; validated with hash_equals() (S1)
- Fixed – Empty/missing HTTP referer is no longer hard-blocked, eliminating false positives for privacy browsers, Referrer-Policy: no-referrer, and proxies (S2)
- Enhancement – WooCommerce: comment protection script no longer loads on product pages for users who cannot leave a verified-purchase review