Noindex Search Result Pages
Asks search engines not to index your internal search result pages, which are thin, endless and a favorite target for spam links.
Snippet Library
WordPress code snippets, ready to use
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Only Logged-In Members Can Create New Sites
Keeps the network's signup form open for new user accounts but only lets people who are already logged in create a site, cutting down on spam sites while staying open to new members.
Prevent Double Form Submissions
Disables a form's submit button and shows "Sending…" right after it is clicked, so impatient visitors cannot send comments, enquiries or orders twice.
Quote Request Form Shortcode
Adds a [wpide_quote_form] shortcode where visitors pick a service, budget and timeline and describe their project; requests are emailed to you with spam protection and rate limiting built in.
Record and Show the Registration IP Address
Saves the IP address each new account was created from and shows it in the Users list, which helps spot bulk fake sign-ups.
Reject Comments Submitted Too Fast
Rejects comments sent within a few seconds of the page loading, which only bots manage, using a signed timestamp in the form.
Reject Contact Form 7 Submissions Sent Too Fast
Stamps each Contact Form 7 form with a signed time when it is shown and treats submissions sent within a few seconds as spam. People take longer than bots to fill in a form.
Reject Fluent Forms Messages in Foreign Scripts
Stops Fluent Forms submissions that are written mostly in Cyrillic, Chinese or another script your business does not receive genuine messages in.
Reject Gravity Forms Submitted Too Quickly
Adds a signed time stamp to each Gravity Forms form and marks entries sent within a few seconds of the page loading as spam, which catches bots that fill forms instantly.
Reject Registrations From Email Domains That Cannot Receive Mail
Checks that the email domain of every new registration has mail (MX) records, and refuses sign-ups from made-up or mistyped domains that bots and spammers often use.
Reject Registrations Submitted Too Fast
Stamps the WordPress registration form with a signed time and refuses sign-ups sent within a few seconds of loading it, which stops most registration bots.
Reject WPForms Messages in Foreign Scripts
Blocks WPForms submissions written mostly in Cyrillic, Chinese or another script your business never receives genuine messages in.
Remove Links From Comment Author Names
Shows commenter names as plain text instead of links to their websites, removing the main reward for comment spammers.
Remove the Website Field From Comments
Removes the Website (URL) field from the comment form, which discourages comments posted only to get a link.
Remove the X-Mailer Header From Emails
Stops outgoing emails announcing "PHPMailer" and its version in the X-Mailer header, which reveals details about your server and can count against you in spam filters.
Send Comments From Blocked Email Domains to Spam
Sends comments to the spam queue when the commenter's email address belongs to a throwaway inbox service or any other domain on your list.
Send Comments With Links in the Name Field to Spam
Marks comments as spam when the name field contains a web address, a classic trick of spam bots.
Send Comments With Too Many Links to Spam
Marks a comment as spam when it contains more links than you allow, catching most link-dropping spam before it reaches the moderation queue.
Send Comments in Foreign Scripts to Spam
Sends comments written mostly in Cyrillic, Chinese, Arabic or another script your readers do not use to the spam queue, where most of them belong.
Send Contact Form 7 Emails From Your Own Domain
When a Contact Form 7 form is set to send "from" the visitor's address, switches the sender to your own domain and moves the visitor's address to Reply-To, so emails stop landing in spam.
Simple Math Question on the Login Form
Adds a small addition question to wp-login.php that bots fail, without third-party CAPTCHA services or cookies.
Skip Akismet Checks for Trusted Logged-In Users
Stops sending comments from logged-in users who can edit posts (authors, editors, administrators) to Akismet, saving API calls and keeping staff replies out of the spam queue.
Spam Comments Copied Across Several Posts
Sends a comment to spam when exactly the same text was already posted on another post in the last day, a typical sign of a spam bot working through your site.
Spam Comments Linking to Suspicious Domains
Sends comments to spam when the commenter's website field points to a domain ending you have chosen to distrust, such as .xyz, .top or .click.