Description
Tired of deleting spam comments every day? SpamJam is a lightweight, invisible anti-spam solution that blocks automated spam before it hits your database—without annoying your legitimate users with captchas or verification steps.
Why SpamJam?
Unlike traditional anti-spam plugins that rely on third-party services or frustrating captchas, SpamJam uses intelligent honeypot techniques and behavioral analysis to silently eliminate spam bots. Your real visitors won’t see any difference, but spam bots will be stopped cold.
Free Features
✅ Honeypot Protection – Invisible fields that trap spam bots
✅ Referrer Validation – Blocks direct form submissions
✅ Nonce Security – CSRF protection for all comment forms
✅ Smart Blocklist – Filters common spam keywords
✅ Zero Configuration – Works immediately after activation
✅ No Captchas – Never annoy your real users
✅ Lightweight – Minimal impact on site performance
✅ WooCommerce Compatible – Works with HPOS
Pro Features (Premium)
🚀 Registration Spam Protection – Protect user registration forms with email verification
🚀 Premium Blocklist – Auto-updating list of 15,000+ spam terms
🚀 Custom Blocklist – Add your own keywords and patterns to block
🚀 Geographic Blocking – Block comments from specific countries
🚀 IP Blocking – Block specific IP addresses or ranges
🚀 Rate Limiting – Prevent spam floods with configurable limits
🚀 Email Whitelist – Always allow trusted email addresses
🚀 Spam Logging & Analytics – Track and analyze blocked spam attempts
🚀 Content Validation – Set minimum comment length and maximum links
🚀 Contact Form Protection – Protect Contact Form 7, WPForms, Gravity Forms
🚀 User Enumeration Blocking – Enhanced security against attacks
🚀 Priority Support – Get help when you need it
Perfect For
- Blogs with active comment sections
- Membership sites
- WooCommerce stores
- Community websites
- Any WordPress site tired of spam
How It Works
SpamJam uses multiple layers of protection:
- Honeypot Fields – Hidden form fields that only bots fill out
- JavaScript Validation – Ensures forms are submitted by real browsers
- Referrer Checking – Verifies submissions come from your site
- Hash Validation – Cryptographic verification of form integrity
- Keyword Filtering – Blocks known spam patterns
All of this happens invisibly in the background. Your legitimate users never see a captcha or verification step.
Privacy First
SpamJam doesn’t send your data to third-party services. Everything happens on your server, keeping your users’ information private and your site GDPR-compliant.
Installation
Automatic Installation
- Log in to your WordPress admin panel
- Go to Plugins Add New
- Search for “SpamJam”
- Click “Install Now” and then “Activate”
- That’s it! SpamJam is now protecting your site
Manual Installation
- Download the plugin ZIP file
- Go to Plugins Add New Upload Plugin
- Choose the ZIP file and click “Install Now”
- Activate the plugin
- SpamJam starts working immediately—no configuration needed!
After Activation
SpamJam works automatically with zero configuration. For Pro features, visit SpamJam in your WordPress admin menu to configure advanced options.
FAQ
-
Do I need to configure anything?
-
No! SpamJam works immediately after activation. Just install, activate, and forget about spam.
-
Will this slow down my site?
-
No. SpamJam is extremely lightweight and uses efficient caching. Most users see zero performance impact.
-
Will my users see captchas?
-
Never. SpamJam is completely invisible to legitimate users. No captchas, no verification steps, no friction.
-
Does this work with my theme?
-
Yes! SpamJam works with any WordPress theme that uses standard comment forms. It’s compatible with popular themes like Astra, GeneratePress, OceanWP, and more.
-
Is this compatible with WooCommerce?
-
Yes! SpamJam is fully compatible with WooCommerce and supports High-Performance Order Storage (HPOS).
-
What’s the difference between Free and Pro?
-
The free version protects comment forms with honeypots, nonce validation, and basic blocklists.
Pro adds 10+ advanced features including:
– Registration form protection with email verification
– Premium auto-updating blocklist (15,000+ terms)
– Custom blocklist for your specific needs
– Geographic and IP blocking
– Rate limiting to prevent spam floods
– Email whitelist for trusted users
– Spam logging and analytics
– Content validation rules
– Contact form protection (CF7, WPForms, Gravity Forms)
– Priority support -
How does geographic blocking work?
-
Pro users can block comments from specific countries by entering country codes (e.g., CN, RU, UA). This uses IP geolocation to identify the commenter’s country and blocks them before they can submit spam.
-
What is rate limiting?
-
Rate limiting prevents spam floods by limiting how many comments a single IP address can submit within a time period. For example, you can set it to allow maximum 5 comments per hour per IP address.
-
Can I see what spam was blocked?
-
Yes! Pro users can enable spam logging to track all blocked attempts. You can see IP addresses, countries, blocked content, and reasons for blocking. Logs are automatically cleaned up based on your retention settings.
-
Does this work with other anti-spam plugins?
-
SpamJam can work alongside other plugins, but for best results, we recommend using it as your primary anti-spam solution to avoid conflicts.
-
How effective is SpamJam?
-
SpamJam blocks 99%+ of automated spam bots. The multi-layered approach catches what single-method solutions miss.
-
Do you offer support?
-
Yes! Free users can get community support through WordPress.org forums. Pro users get priority email support.
-
Is my data sent to third parties?
-
No. SpamJam processes everything on your server. Your data stays private and GDPR-compliant.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“SpamJam” is open source software. The following people have contributed to this plugin.
Contributors
Translate “SpamJam” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
2.1.0 – 2025-02-12
- UI – Consolidated 7 tabs into 3 clear tabs: Dashboard, Settings, Upgrade/Account
- UI – Settings tab uses collapsible sections grouped by function with inline upgrade nudges
- UI – Upgrade tab shows feature comparison table and contextual CTAs per plan tier
- UI – Dashboard shows contextual upsells based on actual spam data for free users
- Fixed – Migration: blocklist migration never ran due to version stamp logic bug
- Security – Migration: added manage_options capability check
- Performance – Migration: early-return when db_version is current (skips work on every admin load)
- WP VIP – Migration: replaced file_exists() with $wp_filesystem->exists()
- Performance – Migration: disabled autoload on large premium blocklist option
2.0.0 – 2025-02-10
- Security – Removed all error_log() calls that could leak sensitive data
- Security – Replaced predictable SHA256 hash with HMAC using wp_salt() secret
- Performance – Consolidated 17 get_option() calls into batch lookup on dashboard
- Performance – Added early POST method check to comment_field_swap() (skips 99% of requests)
- Performance – Cached get_settings_schema() with static variable
- WP VIP – Switched geographic IP API to HTTPS with failure caching
- WP VIP – Refactored multisite sync to async via wp_schedule_single_event()
- WPCS – Converted all files from spaces to tabs indentation
- New – Spam logging and dashboard stats now available to all users
- New – Freemius uninstall hook for complete data cleanup on plugin deletion