Active installations10Adoption metric — not a quality score
WordPress.org rating5.0 / 5 from 1 ratings
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records Rabbit Builds Anti-Spam Comment Shield version 2.1.0 as active, updated 17d ago and tested up to WordPress 7.1.
Overview
About this plugin
Rabbit Builds Anti-Spam Comment Shield is a fast, reliable anti-spam plugin for the default WordPress commenting system. It blocks automated bot submissions using layered validation, while keeping the experience clean for real visitors.
Developed and maintained by Rabbit Builds — visit our website to explore more WordPress tools and solutions.
Important
Clear your page cache after activation or after changing plugin settings.
Works with the default WordPress comment form only (not AMP comment forms).
Features
🛡️ Hash-Based Verification — Blocks bots by hiding the comment form action URL
🍯 Honeypot Trap — Hidden field that catches bots filling every input
⏱️ Time-Based Check — Rejects comments submitted too quickly
🔒 REST API Protection — Blocks unauthenticated REST API comments (disable for headless setups)
⚙️ Clean Settings Page — Status at a glance, one switch per protection layer and a live preview of the blocked message
🔔 Admin Bar Counter — See blocked spam count in the admin bar
✏️ Custom Block Message — Personalize the blocked spam response
100% GDPR Compliant — No external requests, no cookies, no tracking
Captcha-Free — Completely invisible to your visitors
~200 bytes inline JavaScript — Zero performance impact
Compatible with all page caching and performance optimization plugins
How does it work?
The plugin removes the comment form action URL from raw HTML output.
When real user interaction is detected (scroll, mouse move, touch, or focus), JavaScript restores the action URL with a unique hash token.
On submit, the server validates the hash token, checks the honeypot field, and verifies submission timing.
If any check fails, the request is blocked with a 403 response before spam can reach your database.
License
0-or-later.
You may use, modify, and redistribute it under the terms of the GNU General Public License.
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
anti spam
comment spam
stop spam
gdpr
security
Compatibility & maintenance
Compatibility & maintenance
Tested with WP 7.1
Marked as tested with the current WordPress 7.1 release.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.1
Minimum requirementsWordPress 5.0 · PHP 7.4
Update activity16 Oct 202617d ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
Version2.0.6→2.1.0
WordPress compatibility7.0.4→7.1.3
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
