Reject Fluent Forms Messages in Foreign Scripts
Stops Fluent Forms submissions that are written mostly in Cyrillic, Chinese or another script your business does not receive genuine messages in.
Snippet Library
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Stops Fluent Forms submissions that are written mostly in Cyrillic, Chinese or another script your business does not receive genuine messages in.
Adds a signed time stamp to each Gravity Forms form and marks entries sent within a few seconds of the page loading as spam, which catches bots that fill forms instantly.
Refuses login form submissions that are not sent from a page on your own site, which stops many brute-force bots that post straight to wp-login.php.
Refuses login attempts for usernames bots love to try, such as "admin", "administrator" or "root", before WordPress even checks a password.
Checks that the email domain of every new registration has mail (MX) records, and refuses sign-ups from made-up or mistyped domains that bots and spammers often use.
Stamps the WordPress registration form with a signed time and refuses sign-ups sent within a few seconds of loading it, which stops most registration bots.
Returns an error for requests whose Host header is not your site's domain, which blocks host header injection tricks (such as poisoned password reset links) and junk traffic aimed at your server's IP.
Scans every uploaded file that is not a PHP file for hidden PHP code (such as an image with a PHP payload) and refuses the upload if any is found.
Blocks WPForms submissions written mostly in Cyrillic, Chinese or another script your business never receives genuine messages in.
Lists up to four other downloads from the same category below each download's content, helping buyers discover more of your products.
Shows up to three other items that share a category or tag below single custom post type entries, such as related recipes, services or case studies.
Places a "Related" link to another post from the same category halfway through each blog post, a well-placed internal link that keeps readers on the site.
Lists three posts from the same categories at the end of each single post. No plugin, no extra database tables.
Makes the related products section match products by shared tags instead of shared categories, for more precise suggestions.
Lowers the password strength WooCommerce requires on registration and checkout from "strong" to "medium", which reduces abandoned sign-ups.
Shortens how long the cookies that remember a commenter's name, email and website last, from WordPress's default of one year to 30 days.
Saves utm_source, utm_medium, utm_campaign, utm_term, utm_content and gclid from the landing page in a first-party cookie, then fills matching hidden fields in your forms so leads keep their campaign source.
Brings back the status, category, author, search and sorting you last used when you return to the Posts, Pages or Media list, instead of starting from "All" every time.
Shows administrators a reminder when they have not changed their password for 180 days.
Shows a notice on the dashboard while no published privacy policy page is selected in Settings > Privacy, with a link to set one up.
Once a week, emails each author a list of their drafts that have not been touched for a month, with edit links, so good ideas do not get forgotten.
Shows a warning after saving when a post contains a Video block without a captions or subtitles track, so videos are not published without captions by accident.
Shows a slim coloured bar at the top of every subsite dashboard for super admins with the site's name and address, so changes are never made on the wrong site by mistake.
Shows administrators a gentle notice on the Dashboard and Plugins screens when plugins have been left inactive, since unused plugins still need updates and can be a security risk.