Add Rules to the Virtual robots.txt
Adds Disallow rules for internal search result URLs to the robots.txt file that WordPress generates.
Snippet Library
WordPress code snippets, ready to use
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Allow Full Text and Video Previews in Search Results
Adds max-snippet:-1 and max-video-preview:-1 to the robots meta tag, letting search engines show longer text snippets and video previews for your pages.
Block AI Training Crawlers in robots.txt
Adds rules to your virtual robots.txt that ask AI training bots such as GPTBot, ClaudeBot, CCBot and Google-Extended not to crawl your site.
Block Bad Bots by User Agent
Returns 403 Forbidden to aggressive SEO crawlers and scrapers that waste server resources, matched by their user agent.
Block Comments Posted Without Visiting Your Site
Rejects comment submissions that do not come from a page on your own site, which stops bots that post directly to wp-comments-post.php.
Block Fake Googlebot Visits
Checks visitors that claim to be Googlebot with a reverse DNS lookup and blocks the impostors, which are usually scrapers or vulnerability scanners.
Block Login Attempts From Scripts and Command-Line Tools
Refuses login, password reset and registration requests sent by tools such as curl, wget, python-requests or empty user agents, which real browsers never use and brute-force scripts often do.
Block Spam Searches
Answers search requests that contain links, markup, very long strings or words you block with a 404, stopping bots from filling search pages with spam.
Bot Trap Link That Blocks Misbehaving Crawlers
Adds an invisible link that real visitors never see and well-behaved search engines are told to skip; any client that requests it anyway is blocked from the site for 24 hours.
Close Comments on Media Attachments
Prevents comments on attachment pages, a frequent target for spam bots.
Exclude Specific Posts From the Rank Math Sitemap
Leaves the posts and pages you list out of Rank Math's XML sitemaps without changing their robots settings.
Hide Email Addresses From Spam Bots
Encodes every email address and mailto link in posts, widgets and comments so people see them normally but simple harvesting bots cannot read them.
Honeypot Field for Comment Spam
Adds a hidden field to the comment form that people never see but many bots fill in. Comments that fill it are rejected before reaching the database.
Honeypot Trap for Contact Form 7
Adds a hidden field to every Contact Form 7 form that people never see but spam bots fill in. Submissions with the field filled are marked as spam and never emailed.
Honeypot Trap for Login and Registration Forms
Adds an invisible field to the login and registration forms; bots that fill it in are rejected while people never see it.
Honeypot Trap on the Lost Password Form
Adds a hidden field to the lost password form that only bots fill in and silently ignores those requests, so bots cannot flood your users with reset emails.
JavaScript Check Against Comment Spam Bots
Adds a hidden field to the comment form that only a real browser running JavaScript fills in; comments without it go to the spam queue instead of moderation.
Keep Bots Out of Redirection's 404 Log
Stops the Redirection plugin from logging 404s caused by crawlers and vulnerability scanners (wp-login probes, .env and .php file hunts), so the log shows only real broken links.
Keep Feeds Out of Search Results
Sends an X-Robots-Tag header that asks search engines not to index your RSS feeds, so feed URLs do not compete with your real pages.
Keep Filtered and Sorted Shop Pages Out of Search Engines
Adds noindex to shop pages that have sorting, price or attribute filters in the URL, so search engines index your real category pages instead of thousands of variations.
Keep REST API Responses Out of Search Results
Sends an X-Robots-Tag: noindex header with every REST API response so search engines do not index raw JSON from /wp-json/ next to your real pages.
Limit Contact Form 7 Submissions per Visitor
Allows only a few Contact Form 7 submissions per IP address each hour and treats the rest as spam, which stops bots and angry repeat senders flooding your inbox.
Limit Guesses on Password-Protected Posts
Allows each visitor at most 10 password attempts on password-protected posts and pages every 15 minutes, which stops bots from brute-forcing the post password.
Limit Orders per Customer per Day
Blocks a customer from placing more than a set number of orders in 24 hours, matched by billing email, to stop card testing and reseller bots.