Simple Good CAPTCHA for WP
WPBRUISER
WPBruiser (formerly “Goodbye Captcha”) is a non-CAPTCHA anti-spam plugin for WordPress that works by detecting bots before they can submit spam β without requiring any user interaction (like solving CAPTCHAs). Itβs designed to stop spam on:
- Comments
- Login forms
- Registration forms
- Contact forms (like Contact Form 7, Gravity Forms, etc.)
π How WPBruiser Works
WPBruiser uses a JavaScript-based behavioral analysis approach. Here’s what it does:
β 1. JavaScript Validation
- It injects invisible JavaScript into your forms (comment, login, register, etc.).
- When a human loads the form, the browser executes this JavaScript and sets hidden validation values.
- Bots that do not execute JS (most spam bots) will submit the form without these values β and are instantly blocked.
β 2. Form Submission Timing
- WPBruiser also checks how fast the form is submitted.
- If a comment is posted within a fraction of a second, itβs likely from a bot.
β 3. Field Tampering Detection
- It monitors for manipulation of form fields, which bots often do when injecting spam payloads.
- If field values donβt match expected patterns or formats, the submission is rejected.
β 4. Brute Force Protection
- WPBruiser can block repeated failed logins.
- You can configure IP blacklists and failed attempt thresholds.
β 5. No Cookies Required
- Unlike some spam blockers, WPBruiser doesnβt rely on cookies, making it more robust in privacy-focused environments.
π§ͺ Effectiveness
π₯ Strengths
- Blocks 99%+ of bot-based spam β especially effective against non-human spam
- No user friction β no CAPTCHA, no puzzles, no clicks
- Compatible with:
- Native WordPress comment forms
- WooCommerce forms
- Contact Form 7, Gravity Forms, Ninja Forms, etc.
- Light on resources (no third-party API calls)
- Doesnβt slow down site
π« Limitations
- Not effective against human spammers
- Humans solving CAPTCHAs or manually spamming can still get through
- Not ideal for completely JS-disabled browsers (very rare)
- Not a replacement for a full firewall or bot protection system (e.g., Cloudflare)
β Use WPBruiser If You Want:
- No CAPTCHA challenges
- Seamless user experience
- To block automated bots at the form level
- Lightweight, self-contained plugin
Pair it with Akismet or CleanTalk for added protection against human spammers.
