When a WordPress site receives spam through several forms or account flows, WP Armour Extended adds utilities to review and filter that activity. It builds on WP Armour’s JavaScript honeypot protection.

How the honeypot screens automated submissions

JavaScript inserts a honeypot field into supported forms. A bot that cannot use JavaScript cannot fill the field to pass the check. Visitors do not have to complete a CAPTCHA or extra verification field. The check targets automated submissions; a person can still submit spam manually.

Reviewing spam and filtering repeat activity

Extended can record spam submissions so administrators can inspect what bots tried to send, and log IP addresses associated with bot activity. Its additional controls include:

• Blocking an IP address after multiple spam submissions come from it.
• Adding another layer of filtering based on IP addresses.
• Marking a submission as spam when it contains words or phrases specified by the administrator.

These controls let administrators review unwanted entries and respond to recurring patterns. Keyword rules flag matching submissions; IP controls address activity associated with the same address.

Supported WordPress areas and integrations

WP Armour protection is listed for comments, registration, bbPress forums, Contact Form 7, WPForms, Formidable Forms, Caldera Forms, Toolset Forms, Elementor Forms, Fluent Forms, Divi Theme Contact Form, Theme My Login, and WooCommerce Reviews Pro. Gravity Forms support includes non-Ajax, single-page or step forms.

Extended adds WooCommerce checkout and registration, including card testing orders, and Easy Digital Downloads checkout and registration. Other listed integrations include QuForm, Ninja Forms, Ajax-based and multi-step Gravity Forms, MC4WP: Mailchimp for WordPress, S2 Members, Ultimate Members, Bricks Builder Form, BricksForge Pro Form, Beaver Builder Contact Form Module, Strong Testimonials, Formcraft Form, Forminator, WS Form, YITH Easy Login & Register Popup for WooCommerce, UsersWP, Youzify, MailPoet, Brevo, JetForm Builder, HTMLform, the Avia Enfold Theme, BuddyPress, BuddyBoss, Sure Forms, and Everest Forms.

Setup and data handling

Install and activate WP Armour Extended, then check which supported integrations your site uses. Configure the available controls for spam entries, IP logging and blocking, and keyword filtering. Review recorded submissions and adjust filtering rules as spam patterns change.

The plugin is described as GDPR compliant and uses no tracking, cookie storage, or external server calls. Its spam filtering does not rely on external API calls such as those used by Akismet or CleanTalk.