=== Spam protection, Honeypot, Anti-Spam by CleanTalk ===
Contributors: glomberg, alexandergull, sergefcleantalk, antonv1
Tags: antispam, comments, contact form, captcha, spam
Requires at least: 4.7
Tested up to: 6.8
Requires PHP: 5.6
Stable tag: 6.68
License: GPLv2

Blocks spam comments, fake users, contact form spam and more. No impact on SEO. Privacy focused. CAPTCHA free, premium Antispam plugin.

== Description ==

Top-rated anti-spam protection for WordPress. No CAPTCHA, no questions, no animal counting, no puzzles, no math and no spam bots. Universal AntiSpam plugin.

= Anti-Spam features =
1. Stops spam comments.
2. Stops spam registrations.
3. Stops spam contact emails.
4. Stops spam orders.
5. Stops spam bookings.
6. Stops spam subscriptions.
7. Stops spam surveys, polls.
8. Stops spam in widgets.
9. Stops spam in WooCommerce.
10. Real-time email validation. Is email real or Not.
11. Checks and removes the existing spam comments and spam users.
12. Compatible with mobile users and devices.
13. Compatible with General Data Protection Regulation (GDPR) (EU).
14. Blocking  disposable & temporary emails.
15. No Spam - No Google Penalties. Give your SEO boost.
16. Mobile friendly Anti Spam & FireWall.
17. Stops spam in Search Form.
18. Disable comments.
19. Spam FireWall: Anti-Flood.
20. Spam FireWall: Anti-Crawler.
21. Hide «Website» field for comments.
22. Block messages by languages, countries, networks and stop words.
23. Email Address Encoder - protection for email addresses published on your site.
24. No jQuery.

= Free trial then $12 per year =
CleanTalk is an anti-spam plugin which works with the premium Cloud Anti-Spam service cleantalk.org. This plugin as a service <a href="https://developer.wordpress.org/plugins/wordpress-org/detailed-plugin-guidelines/#6-software-as-a-service-is-permitted">https://developer.wordpress.org/plugins/wordpress-org/detailed-plugin-guidelines/#6-software-as-a-service-is-permitted</a>

= Public reviews =
> It’s more than just a tool to combat spam; it’s an integral component that enhances the overall quality and performance of your website.
> <a href="https://www.techbusinessnews.com.au/embracing-a-spam-free-digital-experience-with-cleantalk-anti-spam-plugin/" target="_blank">techbusinessnews.com.au</a>

> Improve Your Security WordPress Spam Protection With CleanTalk Anti-Spam
> <a href="https://thehackernews.com/2023/07/improve-your-security-wordpress-spam.html" target="_blank">The Hacker News</a>.

> CleanTalk - Cloud-Based Anti-Spam Service to Keep Your Site Bot-Free.
> <a href="https://newswatchtv.com/2018/07/18/cleantalk-newswatch-review/" target="_blank">NewsWatch Review</a>.

> Compare reCAPTCHA & Akismet VS CleanTalk
> <a href="https://www.saashub.com/compare-recaptcha-vs-cleantalk">https://www.saashub.com/compare-recaptcha-vs-cleantalk</a>
> <a href="https://www.saashub.com/compare-akismet-vs-cleantalk">https://www.saashub.com/compare-akismet-vs-cleantalk</a>

>I know you have heard of a number of anti-spam plugins. But you must know, the cloud-based ones are the best regarding detection rate. They compare all the content in forms with their own algorithm to find out the legibility.
>*<a href="https://www.techwibe.com/cleantalk-wordpress-plugin-review/" target="_blank">www.techwibe.com</a>*

> The key selling point of CleanTalk for me is not simply its effectiveness. It's the fact that CleanTalk works in the background. It does not make users jump through hoops in order to submit a comment or complete a form.
> <a href="https://www.kevinmuldoon.com/cleantalk-anti-spam-service/">www.kevinmuldoon.com</a>

= AntiSpam protection for comments =
Native spam protection for WordPress, JetPack comments and any other comment plugins. The plugin moves spam comments to SPAM folder or you can set the option to ban spam comments silently. You can also enable the option in the plugin settings to auto-delete comments from SPAM folder.

= Contact Form 7 spam filter =
Plugin extends spam protection for Contact Form 7 (CF7). It can be used with any other third-party spam filters.
<a href="https://blog.cleantalk.org/how-to-protect-your-contactform7-contact-form-using-cleantalk-anti-spam-plugin/">How to protect your Contact Form 7 using CleanTalk Anti-Spam plugin</a>

= Elementor Website Builder filter =
Plugin extends spam protection for Elementor Website Builder. It filters spam submisssions and tested for contact form type.

= Gravity forms spam filter =
Plugin extends spam protection for Gravity forms. It filters spam submisssions for any type of forms.

= Formidable Form Builder spam filter =
Plugin extends spam protection for Formidable Form Builder. It filters spam submisssions for any type of forms - Contact Form, Survey & Quiz Forms.

= Leaky Paywall subscription protection =
Plugin protects Leaky Paywall plugin (by ZEEN01) against spam subscriptions. It can be used with any other third-party spam filters.

= HubSpot protection for embedded forms =
Plugin protects HubSpot embedded forms against any spam submissions. Guide to start using embedded forms https://knowledge.hubspot.com/forms/how-can-i-share-a-hubspot-form-if-im-using-an-external-site

= Contact Form by WPForms spam filter =
Plugin extends Contact Form by WPForms to provide spam protection. It filters spam submissions for each type of forms - simple contact form, marketing form, request a quote and etc.

= WooCommerce spam filter =
Anti-spam by CleanTalk filters spam registrations and spam reviews for WooCommerce. The plugin is fully compatible with WooCommerce 2.1 and higher.

= Spam filter for theme contact forms =
The plugin blocks spam emails via any theme (built-in ones included) contact forms. The plugin filters spam emails silently (without any error notices on WordPress frontend) in AJAX forms as well.

= bbPress spam filter =
Spam protection for everything about bbPress: logins, registrations, forums, topics and replies.

= Many other great contact, signups and all kind of forms that supported by CleanTalk =
* AWeber form builder <a href="https://wordpress.org/plugins/aweber-web-form-widget/">https://wordpress.org/plugins/aweber-web-form-widget/</a>
* Contact form by BestWebSoft <a href="https://wordpress.org/plugins/contact-form-plugin/">https://wordpress.org/plugins/contact-form-plugin/</a>
* Contact Form Plugin by Fluent Forms Ninja forms <a href="https://fluentforms.com/">https://fluentforms.com</a>
* Forminator contact from <a href="https://wpmudev.com/project/forminator-pro/">https://wpmudev.com/project/forminator-pro/</a>
* Ninja forms <a href="https://ninjaforms.com/">https://ninjaforms.com</a>
* Newsletters - MC4WP: Mailchimp for WordPress (<a href="https://www.mc4wp.com/">mc4wp.com</a>), MailPoet – emails and newsletters in WordPress (https://www.mailpoet.com/)
* WS Form Lite <a href="https://wordpress.org/plugins/ws-form/">https://wordpress.org/plugins/ws-form/</a>
* WP User Frontend, UserPro.
* WordPress Landing Pages.

Protection for forms above works as built-in function of Anti-Spam by CleanTalk, without any additional actions from a user. Anywaym, if you have missed spam, try to activate a few options below. If nothing helps, ask for help at support forum <a href="https://wordpress.org/support/plugin/cleantalk-spam-protect/">https://wordpress.org/support/plugin/cleantalk-spam-protect/</a>

* Any WordPress form (checkbox 'Custom contact forms').
* Any submission to the site (checkbox 'Check all POST data').

= Check existing comments for spam. Bulk spam comments removal. Spam comment Cleaner =
With the help of anti-spam by CleanTalk you can inspect through existing comments to find and quickly delete spam comments at once. To use this function, go to WP Console -> Comments -> Find spam comments.

= Check existing users for spam. Bulk spam accounts removal. Spam users cleaner =
With the help of anti-spam by CleanTalk you can inspect through existing accounts to find and quickly delete spam users at once. For use this function, go to WP Console -> Users -> Check for spam. Also, you can export a list of spam users to the CSV.

= Private black lists for anti-spam service =
Automatically block comments and registrations from your private black IP/email address list.

= Hide «Website» field for comments =
This option hides the «Website» field from standard WordPress comments forms. After that spammers won't be able to send spam links using «Website» field in the bottom of the comments form.

= Low false/positive rate =
This plugin uses multiple anti-spam tests to filter spam bots having as low false/positive rate as possible.

= How does CleanTalk improve SEO for your website? =
*CleanTalk works faster than most of the other anti-spam plugins.* It is common knowledge that the faster your site loads, the better your customer experience is, the better your SEO will be, and the better your site will convert. Speed is becoming increasingly important in SEO, conversion and user experience. Today, site speed is one of the most important ranking factors on Google. A site that loads slowly will lose visitors and potential revenue.

Among anti-spam plugins CleanTalk is one of the fastest. Despite the large plugin functionality, the developers have optimized the performance of
the plugin so that AntiSpam by CleanTalk is faster than most analogs. This contributes to the cloud service architecture, as all calculations take place in the cloud, not on the server, the server receives the finished result for further action.

https://s.w.org/plugins/cleantalk-spam-protect/screenshot-5.png?r=1288723

Unlike stand-alone plugins (like Antispam Bee) Anti-Spam by CleanTalk uses less CPU that improves site response, visitors experience and SEO results.

= Spam FireWall =
Spam FireWall allows blocking the most active spam bots before they get access to your website. It prevents spam bots from loading website pages so your web server doesn't have to perform all scripts on these pages. Also it prevents scanning of pages of the website by spam bots. Therefore Spam FireWall significantly reduces the load on your web server. Spam FireWall also makes CleanTalk the two-step protection from spam bots. Spam FireWall is the first step and it blocks the most active spam bots.  CleanTalk Anti-Spam is the second step and checks all other requests on the website in the moment of submitting comments/registers etc. How does it work?

 * The visitor enters to your web site.
 * HTTP request data are being checked in the nearly 5.8 million of the identified spam bot IPs.
 * If it is an active spam bot, the bot gets a blank page, if it is a visitor then he receives a normal page. This process is completely transparent for the visitors.

All the CleanTalk Spam FireWall activity is being logged in the process of filtering.

= Spam FireWall: Anti-Flood & Anti-Crawler =
Spam FireWall: Anti-Flood and Anti-Crawler options are intended for blocking unwanted bots, content parsing, shop goods prices parsing or aggressive website scanning bots. Learn more https://cleantalk.org/help/anti-flood-and-anti-crawler

= How to protect sites from spam bots without CAPTCHA? =
The most popular anti-spam method is CAPTCHA - the annoying picture with curved and sloping symbols, which are presented to the visitor to decipher and fill in. In is supposed that spam bots won't discern these CAPTCHA, but a visitor will. CAPTCHA provokes great irritation, but if the visitor wants to comment, he has to fill in these symbols time after time, making mistakes and starting once again. Sometimes CAPTCHA reminds us of the doodles of a two year old child. For users with vision problems CAPTCHA is an insurmountable obstacle. Users hate captcha. Captcha for users means "hate". Unreadable CAPTCHA stops about 80% of site visitors. After 2 failed attempts to decipher CAPTCHA 95% of visitors reject further attempts. At the sight of CAPTCHA and after input errors, many visitors leave the resource. Thus, CAPTCHA helps to protect the resource spam both from bots and visitors. CAPTCHA is not a panacea from spam. Doubts concerning the Need for CAPTCHA?

*"Ultimately, CAPTCHAs are useless for spam because they're designed to tell you if someone is 'human' or not, but not whether something is spam or not." Matt Mullenweg*

You do not have to work in IT to know what spam is. Besides piles of unwanted email, there are spam bots, or special software programs designed to act as human website visitors that post unwelcome messages over the Internet to advertise dubious services. More often than not spam messages do not even make sense. Similar to bacteria and virus mutations developing antibiotic resistance, spam bots are becoming more resilient in penetrating Internet firewalls and security layers.

= Real-time email validation. Is email real or Not. =
It is very important to be sure that the user used his real email address. Spambots very often use fake email addresses, i.e. which addresses do not exist.

CleanTalk will check email addresses for existence in real time.

Non-existing email addresses also entail several other problems for website owners.

* You can never contact them by email,
* the client will never receive any notifications from you (account activation letter, password recovery, email distribution, notifications, etc.),
* if you use email marketing for your clients, then a large number of nonexistent emails in the mailing list may result in your IP address being added to various blacklists of email servers.

Improve your email list with email validation without fake emails.

= Blocking  disposable & temporary emails =
Block fake and suspicious users with disposable & temporary emails to improve email delivery. So, it also prevents malicious activity, spam bots, and internet trolls.

= Latest and the most SPAM active IPs, Emails, Domains and ASN =
* yawiviseya67@gmail.com
* xrumer888@outlook.com
* irinademenkova86@gmail.com
* zekisuquc419@gmail.com
* prince@stopformspam.xyz
* 191.101.217.24
* 199.167.138.22
* 178.159.37.17
* 185.190.42.200
* 45.133.172.23

Effective date is July 13th, 2025. Real-time data is available at <a href="https://cleantalk.org/blacklists">https://cleantalk.org/blacklists</a>.


= Stops Spam in Search Form =
Spam bots can use your search form to make a GET request with spam text. CleanTalk Anti-Spam has the option to protect your website search form from spam bots. Each time, the search generates a new page and if there are many requests, this can create additional load. So, under some conditions, spam searches can be indexed, which affects SEO,

* Anti-Spam protection for website search forms repels spambots.
* If your search form gets data too often the CleanTalk Anti-Spam plugin will add a pause and increase it with each new attempt to send data. It saves your web server processor time.
* Spam protection allows you to not forbid indexation for the crawler bots if you really need it but simultaneously you will get protection from spambots.

You will always know what users were looking for on your site.

= Disable comments =
This option disables comments on your site. You can choose one or several options:

* Disable comments for posts
* Disable comments for pages
* Disable comments for media

When using Disables comments, existing comments will not be deleted and will remain on the pages.

= Email, Phones Address Encoder =
CleanTalk Anti-Spam offers a feature called "Encode contact data" that is designed to encode all email addresses on the website pages. Encoding email, phontes addresses increases the level of protection of contact data from being abused, parsed, getting spammed and used in spam mailing lists by bots and online criminals. To reveal the encoded email address simply click on it and it will be decoded instantly.

= Will the anti-spam plugin protect my theme? =
Yes, it will. The Anti-spam by CleanTalk is compatible with any WordPress theme.

= Should I use other anti-spam tools (Captcha, reCaptcha and etc.)? =
CleanTalk stops up to 99.998% of spam bots, so you can disable other anti-spam plugins (especially CAPTCHA-type anti-spam plugins). In some cases several anti-spam plugins could conflict with each other.

= Honeypot field =
The option helps to block bots. The honeypot field option adds a hidden field to the form. When spambots come to a website form, they can fill out each input field. Enable this option to make the protection stronger on these forms. Learn more about supported forms here.


== Installation ==

= Installation instructions =

1. Download, install and activate 'Anti-spam by CleanTalk'.

2. Get Access key <a href="https://cleantalk.org/register?platform=wordpress" target="_blank">https://cleantalk.org/register</a>

3. Enter Access key in the settings: WordPress console -> Settings -> Antispam by CleanTalk

4. Do dummy spam comment (registration or contact message) with email **stop_email@example.com**. You should see notice: **Forbidden. Sender blacklisted.**

5. Done! The plugin is ready to use.

= Video guide - Anti-Spam Plugin Installation in WordPress. =

[youtube https://www.youtube.com/watch?v=SktF0s-go6A ]

**Important!** To test spam protection you must post a dummy submissions as website visitor (use must logged out from WordPress console), because the plugin doesn't filter submissions from WordPress administrators.

= How can setup plugin in WPMU version? =
In WordPress multisite version you can switch the plugin to use Global Access key. In this way the plugin doesn't show any options to enter Access key in plugin settings and doesn't show Trial banner in WordPress backend. To setup global CleanTalk access key for all websites in WPMS, define constant in your wp-config.php file before defining database constants:

    define('CLEANTALK_ACCESS_KEY', 'place your key here');

**Make it before you activated the plugin. If the plugin already activated, deactivate it and add the code and active it again.**
Now, all subsites will have this access key.

= Manage and control spam protection =

Go to <a href="https://cleantalk.org/my" target="_blank">Dashboard</a> at the cleantalk.org or use <a href="https://play.google.com/store/apps/details?id=org.cleantalk.app">Android</a>, <a href="https://itunes.apple.com/us/app/cleantalk/id825479913?mt=8">iPhone</a> anti-spam app to manage and control spam protection.


== Frequently Asked Questions ==

= Why are they spamming me? =
Spammers want to get backlinks from your site to improve their site's PageRank or redirect your visitors to malicious sites.This level of spam can damage your reputation with readers and commentators if you fail to tackle it. It is not uncommon for some WordPress websites to receive hundreds or even thousands of comments every week. However, by using a CleanTalk plugin, spam can be easily handled by your WordPress website.

= Is the anti-spam protection safe for mobile visitors? =
Yes, it is. The plugin doesn't block mobile visitors as well as desktop website visitors. It uses several independent anti-spam tests to decrease the number of false outcomes and to have as low false-positive rate as possible. Multiple anti-spam tests help to avoid false/positive blocks for real website visitors even if one of the tests failed.

= What does the plugin do with spam comments? =
Spam comments are being moved to SPAM folder by default or you can set the option to ban spam comments silently.

= How can I test the anti-spam protection? =
Please use the email **stop_email@example.com** for comments, contacts or signups to see how the anti-spam protection works. Also, you can see the logs for the last 7 days in the <a href="http://cleantalk.org/my/show_requests">Dashboard</a> or look at the folder "Spam" for banned comments.

= How does the plugin stop spam? =
Please, note - administrator's actions are NOT being checked.

The plugin uses several simple tests to stop spammers:

1. **JavaScript anti-spam test.** 99% of spam bots don't have full JavaScript functions support. So, the plugin has the code which can be run by normal visitor and can't be run by the spam bot.
1. **Email, IP, domain spam activity list entries check.** The plugin uses spam activity database online at cleantalk.org, consisting of more than 20 billion spam activity records of IPs, Emails, Domains and ASN. If the sender's IP or Email is in the database, the sender gets some spam scores. To reduce false/positive rate the plugin not only uses the blacklist test to ban spammers, the sender will be banned when and only when multiple spam tests have been failed.
1. **Comment submit time.** Spam bots usually submit the info immediately after the page has been loaded, this happens because spam bots don't actually fill the web form, they just send $_POST data to the blog. The normal visitor sends the data after several seconds or minutes.

= What about pingback, trackback spam? =
The plugin passes pingbacks without any checks by default. All trackbacks will be blocked if the sender had spam activity.

= Can I use CleanTalk to remove pending spam comments? =
Yes, you can. The plugin has the option to test all pending comments via database of <a href="https://cleantalk.org/blacklists">spam active IP/Email</a>, found spam comments will be moved to Trash folder.

= How does the plugin find spam in pending comments or registered accounts? =
The plugin checks all non-spam comments in the blacklist database and shows you those senders who have spam activity on other websites.
There are some differences between blacklist database and API to protect you from spam bot registrations/comments online. Blacklists show all history of spam activity, but our API (which is used in spam tests) relies on other parameters too: last day of activity, number of spam attacks during the last days etc. These mechanisms help us to reduce the number of false outcomes. So, there is nothing strange, if some emails/IPs are not found by bulk comments/accounts test.

To check comments please go here:
> WordPress console -> Comments -> Find spam comments

To check users please go here:
> WordPress console -> Users -> Find spam users

= Is the plugin compatible with WordPress MultiUser (WPMU or WordPress network)? =
Yes, the plugin is compatible with WordPress MultiUser. Each blog in multisite environment has individual anti-spam options for the protection from spam bots.

= After the installation I noticed that the number of spam attacks has been increased in the stats =
There are a few reasons for this:

* With the indexing of your web-site by the search systems, appearance of external links and better search results position, your web-site attracts more and more spambots.
* Non-transparent protection systems like CAPTCHA or question/answer, that don't have spam attacks stats, don't let you see the whole picture, or the picture is incomplete.
* Counting methods for spam attacks and spam bots are different for different systems, thus the diversity appears. We seek to provide detailed stats.

= Why my dummy "spam" comment passed to the WordPress? =
The plugin has several options to detect spam bots and humans. If you just post spammy text like this:

    "I want to sell something", "Buy something here.." and etc

the comments will be passed, because the plugin detects sender as a human. So, use special email *stop_email@example.com* to test the anti-spam functionality or wait a few days to see how the plugin works.

= Is it free or paid? =
The plugin is free and distributed under the GPLv2 license.

CleanTalk anti-spam plugin works with a cloud base anti-spam service and this plugin is a Software as a service (SaaS).
CleanTalk it’s a free plugin that works with premium Cloud Anti-Spam service.
https://en.wikipedia.org/wiki/Software_as_a_service

The fact that the plugin works with a premium type service is mentioned in the plugin annotation and in its WordPress catalog description.

We are ready to help you with any issue regarding CleanTalk. There are hundreds of environment compositions and we do our best to cover as many as possible.

= Can I use CleanTalk with cache plugins? =
Anti-spam by CleanTalk doesn't use static HTML code in its templates, so all anti-spam functions work correctly with any WordPress cache plugins.

= Does the plugin protect from spam bots if I use forms with third-party services? =
Yes, it does. Plugin protects web-forms on your websites which send data to third-party servers (like MailChimp). To enable this protection set the option 'Protect external forms' in the plugin settings.

= Does CleanTalk compatible with Cloudflare? =
CleanTalk is fully compatible with CloudFlare. Service doesn't filter CloudFlares IP's (AS13335) through blacklists database, so in this case plugin/service filters spam bots using other anti-spam tests.

= Is CleanTalk compatible with a content delivery network (CDN)? =
Yes, it is. CleanTalk works with any CDN system, i.e. CloudFlare, MaxCDN, Akamai.

= Can I use CleanTalk functionality in my plugins? =
Yes, you can. Follow this guide <a href="https://cleantalk.org/help/api-check-message">https://cleantalk.org/help/api-check-message</a>

= I see two loads of script cleantalk_nocache.js. Why do you use it twice? =
This script is used for AJAX JavaScript checking. Different themes use different mechanisms of loading, so we use two methods for loading our script. If you absolutely know what you are doing, you can switch one of the methods off by defining constants in your wp-config.php file:

    define('CLEANTALK_AJAX_USE_BUFFER', false); //false - don't use output buffering to include AJAX script, true - use it

or

	define('CLEANTALK_AJAX_USE_FOOTER_HEADER', false); //false - don't use wp_footer() and wp_header() for including AJAX script, true - use it

= Can I add exclusions for some pages of my site? =
Yes, you can. There is a special setting in plugin settings.
You could use this guide to learn more: https://cleantalk.org/help/exclusion-from-anti-spam-checking#wordpress

= Can I not send my personal data to CleanTalk servers? =
Yes, you can exclude your data. There is a special setting in plugin settings.
You could use this guide to learn more: https://cleantalk.org/help/exclusion-from-anti-spam-checking#WordPress_field_exclusions

= How to test Spam FireWall? =
Use special IP 10.10.10.10 in URL to test Spam FireWall. For example,

    https://cleantalk.org/blog/?sfw_test_ip=10.10.10.10

Attention! The incognito mode should be enabled in your browser when you do a test. To enable incognito mode press Ctrl+Shift+N for Chrome, Opera и Safari browsers; press Ctrl+Shift+P for Firefox, Internet Explorer and Microsoft Edge. A full guide to enable Incognito mode is here: https://www.wikihow.com/Activate-Incognito-Mode

= How can I enter access key in WPMU version? =
To set up global CleanTalk access key for all websites in WPMU, define constant in your wp-config.php file before defining database constants:

    define('CLEANTALK_ACCESS_KEY', 'place your key here');

Now, all subsites will have this access key.

= Does the plugin work with Varnish? =
CleanTalk works with Varnish, it protects WordPress against spam, but by default the plugin generates a few cookies for the protection from spam bots and it also disables Varnish cache on pages where CleanTalk's cookies have been stored. To get rid of the issue with cache turn off the option 'Set cookies' in the plugin settings.

    WordPress console -> Settings -> CleanTalk -> Advanced settings

Now the plugin will protect WordPress comments, registrations and most of popular contact forms, but will not protect some of rarely used contact forms.

= Does the anti-spam plugin work with Accelerated Mobile Pages (AMP)? =
Yes, it does. But you have to turn off the SpamFireWall and the option 'Use AJAX for JavaScript check' in Advanced settigns of the plugin to be fully compatible with Accelerated Mobile Pages.

= Should I change anything in the plugin's settings or in my CleanTalk Dashboard when I switch my website from HTTP to HTTPS or vice versa? =
No. You don't need to change anything in the plugin's settings or in your CleanTalk Dashboard. The plugin will work regardless of the protocol.

= Spam Comment Management =

By default, all spam comments are placed in the spam folder, now you can change the way the plugin deals with spam comments:

1. **Move to the Spam folder.** All spam comments will be placed to the folder "Spam" in the WordPress Comments section except comments with Stop-Words. Stop-Word comments will be always stored in the "Pending" folder.

You can prevent the proliferation of Spam folder. It can be cleaned automatically using the option "Keep spam comments for 15 days." Enable this option in the settings of the plugin: WordPress Admin Page -> Settings -> Antispam by CleanTalk -> Advanced settings -> enable "Keep spam comments for 15 days" -> Save Changes.

2. **Move to Trash.** All spam comments will be placed to the folder "Trash" in the WordPress Comments section except comments with Stop-Words. Stop-Word comments will be always stored in the "Pending" folder.

3. **Ban comments without moving to WordPress backend.** All spam comments will be deleted permanently without going to the WordPress backend except comments with Stop-Words. Stop-Word comments will be always stored in the "Pending" folder.

What comments were blocked and banned can be seen in the Anti-Spam Log here: https://cleantalk.org/my/show_requests?int=week

To manage the actions with spam comments, go to the Control Panel, select the website you want to change the actions for and go to "Settings" under the name of the website.

Please, read more here:
https://cleantalk.org/help/spam-comment-management

= Is the plugin EU GDPR compatible? =
Yes, it is. Please read this article,
<a href="https://cleantalk.org/publicoffer#cleantalk_gdpr_compliance">https://cleantalk.org/publicoffer#cleantalk_gdpr_compliance</a>

== Screenshots ==
1. AntiSpam settings are easy to use to protect any contact forms. For example - Ninja forms, Fluent forms and etc.
2. AntiSpam plugin rejected a spam bot at the CAPTCHA less registration form. The plugin provides explanation to visitor and websites about each rejected comment/registration or contact message.
3. Use AntiSpam analytics tool for each website in service Dashboard to have information about spam/legitimate stats.
4. Special interface to find spam comments.
5. Special interface to find spammers in users.
6. Prevent WooCommerce checkout from spammers.
7. Prevent spam contact occurs in your life.
8. Prevent any other spamers, from any other forms, for example from WPForms.

== Changelog ==

= 6.68 13.11.2025 =
New. Integration. Ultimate affiliate plugin (Codecanyon).
New. Integration. Gwolle Guestbook integration implemented.
Upd. Integrations. Improved capability with perfmatters.
Upd. Settings. Improved UX.
Upd. Email Encoder. Try to decode in both ways ssl/str_base.
Fix. ContactEncoder. Editing duplicate pages due to buffer interception.
Fix. Code. Unit text TestRequirementsChecker refactored.
Fix. Integration. WPForo. Catch email and nickname via native WPF object. Get message from input.
Fix. Integrations. Nex-forms POST clearance from service fields after check.
Fix. Protection by fake button. Sender.net forms ignored, preparing for the next iteration.
Fix. Integrations. GiveWP. Partially protected Give REST submission.
Code. Unused code removed.
Mod. TRP. TRP edits, duplicate the cleantalk_allowed_moderation option and move it to settings.

= 6.67 30.10.2025 =
New. AdminBanner. Separation of banners about an empty and invalid key
New. AdminBanner. Editing logic for a banner about an incorrect key
Fix. ContactEncoder. Revert svg content.
Fix. Integrations. Prevent spam requests to third-party services.
Fix. Integrations. Added Beaver Builder.
Fix. Integrations. Improved gathering data for fluentbooking pro.
Fix. OptimizePress. Registration process protected.
Fix. Integration. WP Booking System integration fixed.
New. Integration. Doctor Plus theme registration and login.
Fix. Integration. WPForms. Fixed missed request on non-emtpty WPForm form errors array.
Fix. Hide website field. Forced condition to replace via honeypot.
Upd. Server Requirements Checker. Added curl_multi_exec to the check-list.
New. Email exists check. Implemented for CF7. (#669)
Upd. Settings. Updated access key link parameters for improved registration process.
Fix. Settings. Typo (system requirements) fixed.
Fix. Settings. Complete deactivation fixed.
Fix. State. Default `fw_stats` fixed.
Fix. SFW. SFW updating (process exclusions) fixed.
Fix. Exclusion. Newsletter Automation. Skip test newsletter check.
Fix. Integration. btQuoteBooking form params gathering fixed.
Fix. Integration. WP Mailer Lite. Fixed exclusion.


= 6.66 16.10.2025 =
Fix. Remote calls. Debug RC now hide sensitive data.
Fix. TRP. Show TRP for admins and editors.
Fix. TRP. Twenty Twenty-Five theme support added.
Fix. Settings. Activator fixed.
New. Summary and statistics. Support user action moved.
Fix. Integrations. Skip service requests for checkout process.
Fix. FW. Improved rules to update personal tables.
Fix. Integrations. Updated statement to skip woo-mailerlite service requests.
Fix. Integrations. Fixed statement for cwginstock.
Fix. Integrations. Improved statement to intruding to checkout request.

= 6.65 02.10.2025 =
Fix. Code. Pluggable exclusions logic fixed.
Fix. Common. Alt cookies getting fixed.
Fix. ContactEncoder. Skip SVG content.
Fix. Integration. Added WPCommunity login to request exclusions.
Fix. Integration. Fluent Booking Pro integration fixed - exclude requests from general contact forms checking.
Fix. Integration. Skip BuddyBoss login form.
Fix. Integration. WooCommerce mark spam orders fixed.
Fix. Integration. WP Booking System integration fixed - support pro version.
Fix. Integrations. Added rules to skip woocommerce service request.
New. CheckEmailExist. Support for Registration Form.
New. CheckEmailExist. Support for Woocommerce checkout form.
New. Integration. Added NEXForms integration.
New. Integration. Indeed Coming Soon integration implemented.
New. Summary and statistics. Temporary support user creation implemented.
Upd. CheckEmailExist. Improve support for Woocommerce checkout form and update option description.
Upd. Search form. Added CleanTalk unique sign for native form.
Upd. UsersChecker. Include first name, last name, and nickname in csv report of user data output.

= 6.64 18.09.2025 =
New. Integration. Integration with WPFunnels.
New. CheckEmailExist. Support for Registration Form.
New. Integration. LifterLMS (registration) protection implemented.
New. CheckEmailExist. Support for Fluent Forms.
Upd. Request parameters. Calculate no submittime if bot detector enabled.
Upd. Bot detector gathering. Changed URL of wrapper to fd.cleantalk.org
Mod. Integration. Unset visible fields.
Fix. Integration. Happy Forms protection fixed.
Fix. Integration. HabSpot external form (transparent div) protection fixed.
Fix. Integration. Back-In-Stock ajax catching detect fixed.
Fix. Integration. Back-in-stock-notifier fixed event token transport.
Fix. External forms. Protection by cover fixed.
Fix. Code. Undefined object botDetectorLocalStorage using removed.

= 6.63 04.09.2025 =
New. Integrations. BuddyPress App REST API protection.
New. Integration. WooCommerce Wholesale Lead Capture registration protection implemented.
Fix. Integration. SiteReviews integration fixed.
Fix. Integration. Connecting the required js bundle and bot detector for Fluent Booking.
Fix. JS. Passing the original context to an anonymous function
Fix. Integration. FluentBooking integration fixed.
Fix. Code. JS function getCleanTalkStorageDataArray moved to common file.
Fix. Anti-Spam. Integrations by class logic fixed.
Fix. Registration. Checking WP_Error during registration protection.

= 6.62 21.08.2025 =
* Mod. Firewall. Disabling SFW, AntiCrawler, and AntiFlood if the key is invalid or empty
* Fix. Woocommerce. Add to cart validation on AJAX fixed.
* Mod. Settings. Renaming email verification options before submitting the form
* Fix. EmailCheckExist. Edit for WL mode
* Ref. Frontend. Optimize flow to prevent forсed reflow.

= 6.61 07.08.2025 =
* New. Integration. Asgaros Forum topics and replies protected.
* Upd. EmailEncoder. Add mode handler for shortcode.
* Upd. Settings. Restore notice about get key auto.
* Upd. Footer links. Footer links block Recommended plugins updated.
* Upd. ServerRequirementsChecker. Check updated, unit test provided, docs added.
* Ref. JS. Refactoring to optimize bundle size.
* Mod. Code. Removing the option - Manage comments on public pages.
* Del. Script. Remove cleantalk-public-admin.js.
* Fix. Integrations. Do not skip check for woo registration during checkout.
* Fix. Integrations. Fixed uni cpo gathering meta data about woocommerce item.
* Fix. Woocommerce. Deleting REST API order if on pending status.
* Fix. Woocommerce. Event token gathering fixed on any cookies mode.
* Fix. Searchform. JS error on form class gathering fixed.
* Fix. Settings. Search forms. Forgotten space added.

= 6.60 17.07.2025 =
* New. BlockServerRequirements. Added a block with the Server Requirements output
* Mod. BlockServerRequirements. Changed in layout, title, link to the article
* Fix. Code. URLs collecting. Probably fatal error fixed due JSON decoding.
* Fix. Code. EmailEncoder.php. Probably fatal fixed on JSON decoding due null passed as decoded emails array on logging.
* New. Integration. Integration with the SureForms plugin
* Fix. BlockServerRequirements. Style edits
* Fix. BlockServerRequirements. Adding information about requirements to a class, changing access to the Requirements variable
* New. Integration. Integration with SureForms, a new approach to rest integrations
* Fix. Integration. AjaxLogin integration fixed.
* New. FluentCommunity. Skipping a request from the login form
* Fix. Integrations. Newsletter. Fixed warning on acces array offset.
* Fix. FirewallModule. Added a hook to set special cookie "apbct_firewall_die" to skip page caching.
* Fix. Integration. Ninja Forms. Fields collection fixed.
* Fix. Integration. WP Forms. Fields collection fixed.
* Mod. SureForms. Separate implementation of rest route interception, editing of block message output
* Fix. SFW. Skip check on probably missed tables due update process.
* Fix. Code. Code direct call preventing.
* Fix. Alt sessions. Incoming data validation.
* Fix. API. Restored missed first param $url on callback action checkResponse to avoid secound param $method_name missing.
* Fix. SureForms. Edits based on the review
* Fix. Integrations. JS. Do not handle onSubmit middleware for the Events Calendar search form.
* Fix. DB. Table "cleantalk_sessions". If table index is incorrect then recreate the table via updater due update to v6.60.

= 6.59 03.07.2025 =
* Upd. Tests. Reorganizing the file structure of the tests folder
* New. PhpUnit. A separate script for calculating coverage
* Mod. Git. Added a file coverage.txt to gitignore
* Fix. Coverage. Removed the coverage calculation
* Mod. ShortCodeSkipEncode. Removing the shortcut functionality for skipping from encoding
* Fix. ShortCodeSkipEncode. Editing text insertion
* Fix. ShortCodeSkipEncode. Removing the skip test from coding
* Fix. Integrations. Update woocommerce nickname gathering.
* Fix. Integration. Cover-style protection adapted for Zoho iframes.
* Fix. Clear $_POST service fields after basecall.
* Fix. Integration. Fluent form steps ignore.
* Fix. Honeypot. Hidden input for search form fixed.
* Fix. Helper. ToUTF8. Fix nullable case of pregmatch.
* New. Integration. Mailchimp embed forms. Form values replacement adapted.
* New. Hook. Filter user roles who can see the dashboard widget.
* Mod. RequirementsChecker. Nested check allow_url_fopen dependent on cURL
* Ref. Integrations. Updated wp-json handler.
* Fix. Skip check. Added entry point for breakdance forms.
* New. Integration. QuickCal integration protection implemented.
* New. Integrations. RegistrationMagic plugin - prtotect registration.
* Fix. LoginIPKeeper. Handled fatal error case when user meta returns non- array values.
* Fix. JS. Removed AJAX call "apbct_set_important_parameters" handlers.
* Code. EmailEncoder. Encoder. Errors layout refactored.
* Fix. Integrations. Fixed CSCF nickname gathering.
* Fix. EmailEncoder. Encoder. Do not use SSL for logged in user on any page, even if encoded via hook.
* Fix. AntiCrawler. Fixed setCookie statement.
* New. Cloud service. Ability to change regional cloud servers implemented.
* Code. Constants handler implemented.
* Code. Constants "skip_anticrawler_on_rss_feed" and "set_ajax_route_type" are adapted to ServiceConstants class.
* New. Common. Do not exclude no-email requests if constant "APBCT_SERVICE__DISABLE_EMPTY_EMAIL_EXCEPTION".
* Fix. Integration. AjaxLogin integration fixed.
* Fix. CheckServerRequirements. Style css edit
* Fix. WPForms. Editing the username receipt

= 6.58.1 20.06.2025 =
* Fix. Honeypot. Hidden input for search form fixed.

= 6.58 18.06.2025 =
* Upd. Settings. Updated hosting license flow.
* Upd. Remote Calls. Debug call improved - show alt. sessions status.
* Mod. AJAXService. Separating hack connections into a separate class, editing no_priv, renaming the function to AJAXService.
* Fix. Encoder. Encoding content by hooks fixed.
* Fix. Honeypot. Remove label for the Wave validator compatibility.
* Fix. Honeypot. Aria attribute added for label tag.
* Fix. Integration. WP Forms integration protection fixed.
* Fix. Integration. Forminator protection improved.

= 6.57.2 09.06.2025 =
* Fix. Integration. WP Forms integration protection fixed.

= 6.57.1 06.06.2025 =
* Fix. Encoder. Encoding content by hooks fixed.

= 6.57 05.06.2025 =
New. Integration. Chatway Live Chat. Protected via iframe coverage.
New. Integration. Login Signup/Popup registration protection implemented.
New. Integrations. All-in-one chat.
New. EmailEncoder. Shortcode to exclude data from encoding. Lot of refactoring.
New. User/Comment checker. New class LoginIPKeeper implemented to keep spammer IP address even if spammer session is expired.
New. Code. Added links to support and an article in help.
Upd. Integrations. Move wpforms integration to separate class.
Mod. EmailEncoder. Long description updated.
Fix. Alt sessions. Missed data last_update fixed.
Fix. External forms. Outside iframe check. Validate result before final actions.
Fix. Integrations. Fixed forminator nickname gathering.

= 6.56 22.05.2025 =
* Upd. PublicScripts. Update bot detector script enqueueing to use wp_enqueue_script with proper parameters for improved performance and compatibility.
* Ref. WPSearch. Class integration for WP Search
* Upd. Cron. Update flow to prevent object cache.
* New. Options. Gravity Forms spam entries saving option implemented.
* New. Integration. Newsletter plugin integration implemented.
* Fix. Encoder. Dropping attributes contains emails fixed.
* New. Integration. BuddyBoss app REST api protection implemented.
* Upd. Search forms. Integration by class. Meta and cpam check method moved to the class.
* New. Integration. Chaty. Contact form.
* New. Integration. Chaty. Whatsapp form now works via external forms.
* Fix. External forms. Force protection. AJAX action cleantalk_force_ajax_check added to skip signs to make the integration class work.
* Fix. Encoder. Encoding via buffer fixed.
* Upd. Footer. Everest Forms cross-link added.
* Fix. Integration. Easy Digital Downloads. Skip check on built-in email verification.
* New. Integration. WPZOOM forms.
* Fix. Email encoder. Exclude attribute data-et-multi-view from encoding.
* Fix. Integration. Avada Fusion Builder. Reformated JSON response.
* Fix. Honeypot. Search form handling fixed.
* Fix. Encoder. Integration for excluding some service data encoding on SureCart plugin implemented.
* Fix. Encoder. Setting description fixed.
* New. ServeChecker. A class for checking server variables and implementing a non-compliance banner during installation
* Fix. Activator. Deleting an unnecessary call, making code edits
* Fix. AdminNotices. Deleting an extra paragraph
* Fix. Force protection. Condition logic fixed.
* Fix. Force protection. Encoding-decoding stability improved.
* Fix. Force protection. Checking option into constructor implemented.
* Upd. Sessions. Update storage.
* Upd. Settings. Using level for banners from cloud.
* Fix. AdminSettings. Removing unnecessary js code
* Fix. Settings. Editing the display of the About block in Whitelabel mode

= 6.55 24.04.2025 =
* New. Contact data encoder. New encoder state form in settings.
* New. Contact data encoder. Phone number encoding implemented.
* New. Integration. Appointment Booking Calendar.
* New. Settings. Added the footer.
* Mod. Email Encoder. Added underline for replaced text in replace mode.
* Mod. Email Encoder. Statuses of features are disabled if the encoder is fully turned off.
* Mod. Settings. Updates for text the "Set cookies" option.
* Mod. Settings: Changed API key field description and behavior.
* Fix. SFW. The check now runs on `init` hook to fix "load_text_domain" error.
* Fix. Enqueue. Added `allow_url_fopen` check before processing script paths.
* Fix. Integrations. Improved email validation in Ninja Forms
* Fix. Integrations. Enhanced Zoho spam check flow
* Fix. Integrations. Added 'activehosted.com' support in form handling
* Fix. Code. Enqueue. External bot detector script turned back to standard WP enqueuing way.
* Upd. Anti-Crawler. Excluded feed requests.

= 6.54 10.04.2025 =
* New. Code. Enqueue scripts via specialized handler.
* New. Settings. Email Encoder. Now the obfuscation way can be selected (blur/obf/replace).
* Fix. ExternalForms. Excluding the creation of a textarea with the value of the submit attribute.
* Fix. Integrations. Fixed gravity form flow.
* Fix. Integrations. Fixed vikrentcar and vikbooking.
* Fix. Integrations. Fixed wspsc add cart.
* Fix. Integrations. Fixed zoho form flow.
* Fix. Integrations. Rollback preventDefault action.
* Fix. UsersScan. Added check for ct_role existence in user data before processing.
* Ref. Email Encoder. Obfuscation refactored.
* Upd. Integrations. Added spam check for buddyboss edit.
* Upd. Integrations. Ninja forms. Now integration can provide additional email addresses array via GetFieldsAnyDto.

= 6.53 27.03.2025 =
* New. Integration. Event Manager - booking form
* New. Integration. Smart Quiz Builder integration
* New. Integration. Brave PopUp Pro integration implemented.
* Code. Psalm. Fixed all taint issues.
* Fix. Cookies. Page hits and site referrer pararms gain fixed.
* Fix. Cookies. Count in forced alt cookies state on page_hits gain.
* Fix. Cookies. Site referer fixed.
* Fix. Code. UTM marks for payment link fixed.
* Fix. User checker. Non-checkable tab fixed.
* Fix. Integrations. WSForm update flow to handle request in direct function.
* Fix. AjaxHook. Initializing a global variable
* Fix. AvadaIntegration. Skipping hooks, username definition, GFA edit, removed no_cookie_data excision
* Fix. AvadaIntegration. Removed post filtering
* Fix. Integration. Added the definition of 'message' for integration with Jet Form Builder

= 6.52 13.03.2025 =
* New. Integration. Integration with plugin/theme Listeo.
* Mod. Pixel. Disabling a pixel if its mode is 'auto' and the bot detector is enabled
* Mod. Decoration. Changing cursor data collection, renaming functionality
* Mod. Decoration. Removing decorations and changing the logic of data collection from the frontend
* Ref. Integrations. Woocommerce gather to one class.
* Fix. Email encoder. Texts modified by hooks.
* Fix. Email Encoder. Using buffer fixed.
* Fix. CollectingUserActivity. Rename script, changing the selection definition
* Fix. GetKeyAuto. Removed localization
* Fix. External forms. Bitrix24 forms protection implemented.

= 6.51 03.03.2025 =
* New. Integration Awesome Support. Checking registration and creating new tickets.
* New. Integrations. Added Site reviews handler.
* New. Integration. Paid Member Subscription plugin.
* Upd. EmailEncoder. Made JS message translate-ready.
* Upd. ProtectByShortcode. Expanded the array of options.
* Upd. EmailEncoder. Unified localization.
* Mod. GetKeyAuto. Checking the query result code.
* Mod. EmailEncoder. Unification of Email Encoder functionality.
* Fix. Code. JS error during external forms protection fixed.
* Fix. Integrations. False detecting request type registration fixed.
* Fix. Honeypot. Honeypot layout simplified.
* Fix. Get fields any. Collecting message fixed.
* Fix. Common. POST clearance updated.
* Fix. Code. SFW class. PHP 8.2+ compatibility.
* Fix. TRP. Editing the rendering of badges in the admin area.
* Fix. Search form. Skip hero booking forms.
* Fix. Admin page. Admin bar. Spam counters reset fixed.

= 6.50.1 21.02.2025 =
* Fix. Integrations. Registration flag condition updated.

= 6.50 12.02.2025 =
* New. AJAX Wrapper.
* New. Integration. Hubspot embed forms (non-iframe).
* New. Integration. Added LeakyPaywall register handler.
* Fix. Code. Psalm lvl3 completed.
* Fix. Code. Contact Form 7. Run gathering NoCookie Data before apbct_js_test() run.
* Fix. Real Person. Editing the badge output for existing users.
* Fix. Global variables. Cookies getting logic fixed.
* Fix. Settings. Fixed wpms work mode select.
* Fix. Email Encoder. Attribute drop sign upgraded.
* Fix. Email Encoder. Regexp for exclusions updated.
* Fix. EmailEncoder. Exclude ICS calendar.
* Fix. JS. Removed AJAX call "apbct_set_important_parameters".
* Fix. Integration. External forms for publisher.copernica.com custom code.
* Fix. Honeypot field. CSS selector for labels fixed.

= 6.49 30.01.2025 =
* Fix. Email Existence check. The icon and popup now adaptive on window resizing.
* Fix. EmailEncoder. Improved flow to skip encoding inside inline js.
* Fix. Force Protection. Correcting the error of using the class before initialization, adding an option check.
* Fix. Force Protection. Preventing notice occurs from js.
* Fix. Integrations. Added nasa login exclusion.
* Fix. Integrations. Improved ConvertKit forms integrations.
* Fix. Integrations. Improved flow to prevent error occurs.
* Fix. Integrations. Improved nasa registration params.
* Fix. Integrations. Prevent broking elementor swiper gallery.
* Fix. SFW. Fixed update flow, to prevent warning occur on download stage.
* Fix. Settings. Improved refresh nonce flow.
* Fix. Users checker. Selecting users for the checking was fixed.
* New. Bot detector frontend data log. Save logs to alt sessions only if records has new event types.
* New. FormDecoration. The plugin's signature has been added to all the decorations. Added click counting for signatures.
* New. JS-Bundles. Branching the js bundle into external and internal and depending on their options.
* New. UsersChecker. Sorting users implemented.
* Upd. Dashboard widget. Countries flags convert to the svg sprite.
* Upd. DeactivationPopup. Deleted the plugin deactivation pop-up.
* Upd. Integrations. Skip Leaky Paywall validation request.
* Upd. JS-Bundles. Changes to the assembly of bundles and their use.
* Upd. ProtectByShortcode. Renaming the hook.

= 6.48.2 23.01.2025 =
* Fix. SFW. Fixed update flow, to prevent warning occur on download stage.
* Fix. Force Protection. Preventing notice occurs from js.

= 6.48.1 21.01.2025 =
* Fix. Settings. Improved refresh nonce flow.

= 6.48 16.01.2025 =
* New. Cookies type. Auto-detect cookies type on list of specified plugins active.
* New. Integration. Dubsado external iframes protection implemented.
* New. Integration. Tevolution plugin integration implemented.
* New. ForceProtection. Added new module.
* New. SpamProtection. Added shortcode for easily third party integration.
* Fix. AltCookies. Trailing spaces removed.
* Fix. Comment checker. Hints descriptions updated.
* Fix. Comments checker. Fixed count of comments during ajax check process. Docs and descritpions updated.
* Fix. Common. JS keys getting. Fixed case when inline script fired before public bundle loaded.
* Fix. Common. `Helper::dnsResolve()` method fixed.
* Fix. Common. Prevent cookies set on WP Rocket preloader requests.
* Fix. Cron. Added cast for value from database.
* Fix. External Forms. Use 'load' event of window object to add external forms protection instead of rewriting 'window.onload' function.
* Fix. External forms. Clear service fields fixed.
* Fix. Email encoder. Adaptive. Magic on the way popup layout fixed.
* Fix. Forms decoration. Fatal error getting decoration fixed.
* Fix. Integrations. Improved compatible with tandem of wp-rocket and wp-engine.
* Fix. Integrations. 3rd party Moosend form behaviour (spinner) fixed.
* Fix. Integrations. Skip CartFlows login.
* Fix. Integrations. Ninja forms integration fixed.
* Fix. ForceProtection. The condition for adding a listener to enable the option.
* Fix. Search form. Error handling alt cookies set fixed.
* Fix. SetCookies. Removed data encoding for writing cookies off.
* Fix. Settings. Adaptive. Long description popup layout and handling fixed.
* Fix. Settings. Long description behavior fixed.
* Fix. SFW. Download update files by batches.
* Fix. SFW Error Text. Checking whether the init or plugins_loaded hook was executed (#529).
* Fix. WooCommerce. Deleted draft order after forbidden solution.
* Upd. AntiCrawler. Fix condition.
* Upd. AntoCrawler. Changing the logic of the conditions, receiving cookies.
* Upd. AntiCrawler. Added a new cookie for AntiCrawler, checking the loading of the bot detector.
* Upd. BuddyPress. Send negative feedback for deleted Buddypress users.
* Upd. Code. ServerVariables::get is deprecated now.
* Upd. Code. Refactoring to compatible with psalm L3.
* Upd. ForceProtection. Added a verification cookie, added a description and confirmation before enabling the option.
* Upd. Settings. Enabling the default 'email check exist' setting.
* Upd. Settings. Rename get-access-key button.
* Upd. WP CLI. Improvements.

= 6.47 18 Dec 2024 =
* New. Form decoration. Holiday form decoration option added.
* New. JSLibrary. Bot detector log collecting.
* New. Integrations. Sendpulse 3rd party service integration implemented.
* New. Integrations. Added SeedConfirmationPro.
* Upd. EmailEncoder. Remember hook decoding.
* Upd. Settings. Updated logic to clear old sessions data.
* Upd. Integrations. Updated EmailEncoder to integrate Business Directory.
* Upd. EmailEncoder. Fixed warning occurs on plugin delete action.
* Upd. EmailEncoder. Improved work to handle seldom cases.
* Upd. Integrations. Refactoring BuddyPress handler.
* Upd. Code. Improved clean old session data handler.
* Mod. Bot Detector. Library JS script load strategy set to "defer".
* Fix. Integrations. WooCommerce checkout during REST protection fixed.
* Fix. External forms. External forms catching fixed.
* Fix. External forms. ConvertKit integration fixed.
* Fix. UniBanner. Edit access to a variable.

= 6.46 27 Nov 2024 =
* New. Integrations. CoBlocks integration implemented.
* New. EmailEncoder. A new hook for encoding mail
* Upd. TheRealPerson. Update layout.
* Upd. Code. Psalm L3. Updated codebase
* Upd. Integrations. Breeze cache plugin integration implemented.
* Upd. Code. Refactoring honeypot logic.
* Upd. TRP. Improved adaptive.
* Upd. Integrations. Added fibosearch support.
* Fix. Integrations. Ninja forms getting form fields fixed.
* Fix. TRP. Popup text color fixed.
* Fix. Email encoder. Decoding blur-magic rebuilt.
* Fix. Integrations. Exclusion of the Elementor search form
* Fix. Integrations. Regex to exclude search forms
* Fix. EmailEncoder. Handling exceptions and logged-in users
* Fix. EmailEncoder. Exclusion of maps from leaflet

= 6.45.2 19 Nov 2024 =
* Fix. Settings. Fixed banners close handler.

= 6.45.1 15 Nov 2024 =
* Fix. Email Encoder. Exclusions condition fixed.
* Fix. Collecting JS errors. Substring fail case fixed.

= 6.45 14 Nov 2024 =
* Code. Psalm level 3. New progress.
* Fix. Anti-Flood. Blocking page loop fixed.
* Fix. Code. GetFieldsAny(). Added protection for unknown Gravity forms attack that ignores integration hooks.
* Fix. Common check. Prevent spam on Formintator forms direct call attacks.
* Fix. EmailEncoder. Editing the change of double quotes to single quotes.
* Fix. EmailEncoder. Issue with missing tables fixed.
* Fix. EmailEncoder. Revived lost modifyAriaLabelContent() call used to replace back the origin aria attr.
* Fix. Remote Calls. RC calling for the services without the api key fixed.
* Fix. Request Parameters. `apbct_site_landing_ts` parameter handling fixed.
* Fix. Skip request. Skipping an ajax request to edit a profile.
* Mod. EmailEncoder. Popup. Copy button removed. Email made selectable by click. Styles unified.
* Mod. EmailEncoder. Descriptions updated.
* Mod. Sanitize::sanitizeCleantalkServerUrl implemented.
* Upd. Settings. Checking email existence option will be enabled by default for the new users.

= 6.44 31 Oct 2024 =
* New. Integrations. Added honeypot for elementor form.
* New. Email encoder. Hook and shortcode apbct_encode_data handler implemented.
* Upd. EmailCheck. Improved js.
* Upd. Universal banner. Refactored to universal.
* Upd. Code. jQuery's dependency removed form apbct scripts localization.
* Fix. Request parameters. Param apbct_headless gain fixed.
* Fix. Integrations. Flying Press cache plugin integration implemented.
* Fix. EncodeEmail. Editing the change of double quotes to single quotes.
* Fix. Common check. Prevent spam on Formintator forms direct call attacks.

= 6.43.2 23 Oct 2024 =
* Fix. Integrations. Elementor Pro. Remove post-check for email field.
* Fix. Get fields any. Revert last changes.

= 6.43.1 20 Oct 2024 =
* Fix. Integration. Fluent Forms. Field data concatenating fixed.

= 6.43 17 Oct 2024 =
* New. Integrations. Added TourMaster handler.
* New. CheckEmailExist. Visualization of email address verification when filling in the field.
* Upd. CheckingComments. Description of the number of all and verified comments.
* Upd. Integrations. CF7. Ignore wpcf7_skip_spam_check third-side rules if CleanTalk Anti-Spam runs.
* Fix. TRP. Fixed trp layout occurs on the page.
* Fix. Integrations. Ninja forms getting form fields fixed.
* Fix. Integrations. Added exclusion for Broken Link Notifier service action.
* Fix. Integrations. Gravity Forms. Prevent skipping aside attacks to form handler.
* Fix. Integrations. WP Rocket image dimensions requests excluded.
* Fix. Code. JS minifying. Use return instead break on filling email decoder loop.
* Fix. Code. Github action fixed.
* Fix. CheckingComments. Editing the text.
* Fix. EmailEncoder. Fixed a case with skipped encoding an aria-label attribute.
* Fix. EmailEncoder. Improved "wpautop" exclusion.

= 6.42.1 03 Oct 2024 =
* Fix. Adjust. LiteSpeedCache adjusting fixed.

= 6.42 03 Oct 2024 =
* Fix. Integrations. Uni-Cpo pruducts actions - service fields skipping improved.
* Fix. EmailEncoder. CSS. Hide wpautopt breaks between magic blur elements.
* Fix. Integration. Add to cart by get bot detector fixed.
* Mod. Settings. Adaptive version of the settings
* Mod. Settings. Burger menu
* New. Admin bar. Promotion link Manuals and FAQ added.
* Fix. Contact form validate. Emails array urlencoding fixed.
* Fix. External Forms. Skip PayPal redirection form.
* Mod. ReferralLink. Changing the referral link
* Fix. Integrations. TVE plugin affliction to gravity forms fixed.
* Upd. Integrations. Updated adjust module for litespeed.
* Fix. Settings. Removing excess
* Fix. Integrations. Masteriyo LMS plugin. Ignore login events.
* Fix. Integrations. Masteriyo LMS plugin. Registration POST check improved.
* Fix. Code. GetFieldsAny. PHP 8.0 compatibility.
* Fix. Integrations. BuddyPres private messages. Nouveau AJAX messages handled.
* Fix. Settings. TRP and SFW settings minor fixes.

= 6.41.1 21 Sep 2024 =
* Fix. Contact form validate. Emails array urlencoding fixed.

= 6.41 19 Sep 2024 =
* Upd. Params. Removed nocookie table.
* Upd. Integrations. Updated handler for FluentFormPro addon.
* Upd. TRP. Updated layout.
* Fix. Integrations. Updated Forminator handler.
* Fix. Integrations. WC add to cart. Use function instead of const to handle GET cards.
* Fix. Admin. CleanTalk deactivation popup layout fixed.
* Fix. WPMS. SFW update fixed on WPMS mode 3.
* Fix. HTTP. Headers collection for WordPress HTTP API fixed.
* Fix. Public JS. Reduce setting important parameters AJAX calls.

= 6.40 05 Sep 2024 =
* New. Email encoder. Animations and blur emails added.
* New. Integrations. Added handler for wufoo.com.
* New. Integrations. CleantalkWpDieOnComment class implemented to hook the default WP die handler on the comment validation errors.
* New. The Real Person. Adaptive CSS version for admin page.
* New. The Real Person. Show the badge in the admin panel in the comments list.
* Fix. Integration. Woocommerce - adding to cart requests handling fixed.
* Fix. Integrations. Added event handler for gravity multiform.
* Fix. Integrations. Added exclude for WooCommerceProductFilter.
* Fix. Integrations. Updated gathering email handler.
* Fix. Integrations. Updated handler for Divi forms.
* Fix. Integrations. Updated BuddyPress handler statement.
* Fix. Integrations. Excluded klaviyo coupon service request
* Fix. Params. Fixed honeypot handler.
* Upd. CleantalkWidget. The public CT widget is removed.
* Upd. Email encoder. Enabled for any new installations by defaults.
* Upd. The Real Person. Closes the popup when the cursor exits the badge element area.

= 6.39.1 26 Aug 2024 =
* Fix. Params. Fixed honeypot handler.

= 6.39 22 Aug 2024 =
* New. Integration. Otter blocks integration implemented.
* New. GetFieldsAny. Sender emails array
* Upd. Pub-Integration. Adding sender_emails_array
* Upd. The Real Person. Pop-up changes, layout correction
* Fix. The Real Person. Overflow changes for the Spacious theme, Icon size changes
* Fix. The Real Person. Checking against undefined
* Fix. Adjust. Checking for LiteSpeed activity, review edits
* Fix. Integrations. Added EmailOctopus handler.
* Fix. Integrations. Updated email gathering on forminator.
* Fix. Integrations. Updated skip statement.
* Fix. TRP. No TRP badges on inactive licenses
* Fix. Anti-spam. Parameter sender_emails_array moved to the `sender_info` block.
* Fix. Anti-spam. Emails array support for CF7 integration.
* Fix. Integration. Elementor Pro Form integration fixed.
* Fix. Integration. WP Forms integration fixed.
* Fix. Anti-spam. Honeypot logic fixed.
* Fix. Integrations. Updated gathering email handler.

= 6.38 =
* Code. Compatibility. Unnecessary WP Rocket text removed.
* Fix. Integrations. Updated gathering email on Divi.
* Upd. Internationalization. Added Dutch language support.
* Fix. Email encoder. Translation fixed.
* Fix. Requests parameters. Store URLs fixed.
* Fix. Integrations. Fixed compatibility with varnish.
* Fix. JS. Updated compatibility with old browsers.
* Fix. Common. Revert readme text.
* Ref. Search forms protection. Refactored to use storage data instead of hidden fields.
* Mod. Integration. External Forms. Divi Form redirect handling via external forms.
* Upd. Common. Updated readme description.

= 6.37 =
* New. Integration. Added klaviyo handler.
* New. Integration. Thrive Leads integration implemented.
* Upd. Integration. CSCF forms.
* Upd. Integration. Forminator forms username gathering.
* Upd. Integration. Kali Form updated.
* Upd. Changing the Form signs exceptions.
* Upd. Common. Moved changelog.
* Upd. EmailEncoder. Do not encode email in AMP pages.
* Upd. Settings. The Real Person feature. Enabled by defaults for all new installations.
* Upd. Settings. Updated description for Capture buffer.
* Fix. Common. Honeypot field ID attribute fixed.
* Fix. Common. Plugin version fixed.
* Fix. Cookie. Updated gathering pages data in force alt mode.
* Fix. CleanTalk pixel. Pixel error fixed.
* Fix. External forms. Broken reCAPTCHA loading fixed in Active Campaign forms.
* Fix. FindSpam. Added params verification.
* Fix. JS. Console error - empty formOriginal.
* Fix. Settings. Links. Utm tags.
* Fix. Settings. Prevented warning appearing.
* Fix. SFW. Error message typo fixed.
* Ref. Code. Psalm L3. File cleantalk.php refactored.

= 6.36.1 =
* Fix. Common. JS errors fixed.

= 6.36 Jul 11 2024
* New. Integration. Kulahub.
* New. Integrations. Added eloqua handler.
* New. Integration. Piotnet (PAFE) forms.
* New. Integration. Kadence Blocks Advanced.
* New. Settings. W3 Total Cache settings adjusting implemented.
* Upd. API. Method send_feedback upgraded to the version api3.0.
* Upd. Settings. Updated debug view.
* Upd. Settings. WL mode for WPMS link updated.
* Upd. The Real Person feature. Badge layout and popup improved.
* Fix. AltSessions. Encode array to JSON if tried to write raw array to the database.
* Fix. EmailEncoder. Added hook to encode.
* Fix. Forced AltCookies. Bot detector token gain improved.
* Fix. Integration. MailChimp and MailChimp Premium. Empty page issues on CleanTalk response fixed.
* Fix. Integration. Monta Checkout service action excluded.
* Fix. Integration. Ajax search lite plugin request was excluded - it will be caught by standard search form protection.
* Fix. Integration. Bloom integration fixed.
* Fix. Integration. WSFroms. Pregmatch issue fixed.
* Fix. Pixel. Pixel URL fixed.
* Fix. Request. WP HTTP API. Prepare headers to Request::flatten before request.
* Fix. SFW. SFW updating fixed.
* Fix. Server variables. Special sanitize rule for site search cases.

= 6.35 Jun 27 2024
* New. Comments. RealUserBadge implemented.
* New. Code. LinkConstructor class.
* New. Integrations. Added handler for LearnPress.
* New. Integration. Paid Membership Pro direct integration implemented.
* Mod. Links. CleanTalk links have UTM data now.
* Mod. RequestParameters. Common storage implemented.
* Mod. Cookies. Param 'apbct_urls' now works via RequestParameters class.
* Mod. Index files added to the plugins structure.
* Ref. Integrations. Updated flow for force_ajax_check.
* Fix. AltSessions. Encode array to JSON if tried to write raw array to the database.
* Fix. JS. External forms. Search for a submit element.
* Fix. Admin dashboard. Links to get premium layout fixed.
* Fix. JS. Replacing the DOM reference with a variable.
* Fix. JS. Delete xhr started from log.
* Fix. Settings. Get key automatically. Timezone fixed.
* Fix. Integrations. CF7.
* Fix. Integrations. ZOHO.
* Fix. integrations. WS forms. Email provided for get fields any.

= Early changelogs look in changelog.txt =
