Title: SpamJam – Anti-Spam Protection for Comments &amp; Forms
Author: Matt Biscay
Published: <strong>2022년 7월 27일</strong>
Last modified: 2026년 10월 23일

---

플러그인 검색

![](https://ps.w.org/spamjam/assets/banner-772x250.png?rev=2762608)

![](https://ps.w.org/spamjam/assets/icon-256x256.png?rev=2762608)

# SpamJam – Anti-Spam Protection for Comments & Forms

 작성자: [Matt Biscay](https://profiles.wordpress.org/skyminds/)

[다운로드](https://downloads.wordpress.org/plugin/spamjam.zip)

 * [세부사항](https://ko.wordpress.org/plugins/spamjam/#description)
 * [평가](https://ko.wordpress.org/plugins/spamjam/#reviews)
 *  [설치](https://ko.wordpress.org/plugins/spamjam/#installation)
 * [개발](https://ko.wordpress.org/plugins/spamjam/#developers)

 [지원](https://wordpress.org/support/plugin/spamjam/)

## 설명

Spam should not create more work for you—or more friction for your visitors.

SpamJam quietly stops automated comment spam with layered, on-site checks. There
are **no CAPTCHAs to solve**, no puzzles to frustrate readers, and no complicated
setup before protection begins.

Install it, activate it, and get back to running your site.

#### Why Site Owners Choose SpamJam

🚫 **Less Spam to Moderate** – Catch automated submissions before they clutter your
comment queue.
 👤 **No Friction for Real People** – Visitors can comment without
image grids, challenges, or extra verification steps. ⚡ **Protected from Activation**–
Core comment protection is enabled by default, with sensible settings already in
place. 🧠 **Fewer False Positives** – Multiple signals work together; suspicious
edge cases can be held for review instead of being discarded. 🩶 **Lightweight by
Design** – Focused checks run where they are needed, without loading a heavy front-
end framework. 🔒 **Privacy-Conscious Detection** – Core comment analysis runs on
your WordPress site rather than sending comment content to a remote spam-scoring
service.

#### Free Comment Protection

The free version gives blogs, publishers, and WooCommerce stores a strong first 
line of defense:

 * **Per-site salted honeypot** – An invisible, site-specific trap makes generic
   bot scripts easier to identify.
 * **Context-bound timing check** – Uses a signed timestamp tied to the site, post,
   and comment or product-review context.
 * **Weighted spam scoring** – Combines form, timing, token, and referrer signals
   instead of relying on one fragile test.
 * **Cache-safe moderation path** – Preserves comments from stale cached forms and
   holds uncertain submissions for review instead of discarding them.
 * **Secure form validation** – Nonces and time-boxed HMAC tokens help verify legitimate
   comment submissions.
 * **Built-in keyword blocklist** – Stops common comment-spam patterns.
 * **WooCommerce product reviews** – Protects review forms and declares compatibility
   with WooCommerce HPOS.
 * **No-JavaScript fallback** – Missing JavaScript is only a limited signal and 
   does not block or hold a submission by itself.
 * **Dashboard statistics** – See the protection working from your WordPress admin.

No account or API key is required to start protecting comments.

#### Go Beyond Comments with SpamJam Pro

When spam reaches registrations, contact forms, or a high-traffic site, SpamJam 
Pro adds the control and visibility you need:

 * **Protection for popular form plugins** – Cover Contact Form 7, WPForms, Gravity
   Forms, Elementor Forms, Fluent Forms, Formidable Forms, Ninja Forms, and WooCommerce
   registration with bounded payload validation, the core blocklist, and source-
   aware rules.
 * **Actionable spam inbox** – Search and filter events, review false positives,
   restore recoverable comments, allow trusted senders, and use bulk actions.
 * **Source-aware rules** – Allow, moderate, block, or discard submissions using
   conditions tailored to each protected source.
 * **Registration protection** – Add honeypot checks and email confirmation to WordPress
   registrations.
 * **Flood and content controls** – Set rate limits, minimum comment length, maximum
   links, and your own blocked terms.
 * **Targeted blocking** – Block configured IP addresses, email addresses, domains,
   or countries while allowlisting trusted senders.
 * **Reports and analytics** – Understand trends, sources, repeat signals, and false
   positives; receive weekly summaries or export PDF reports.
 * **Professional site tools** – Add an automatically updated extended blocklist,
   multisite synchronization, and white-label controls.

Every Pro feature is included. Choose a license based only on the number of sites
you manage from SpamJam’s Account screen in your WordPress dashboard.

#### Built for the Sites Spam Targets

SpamJam is a practical fit for:

 * Blogs and publications with open comments
 * WooCommerce stores collecting product reviews
 * Membership and community sites accepting registrations
 * Lead-generation sites using popular form plugins
 * Agencies managing protection across multiple WordPress sites

#### How SpamJam Stops Bots

SpamJam looks for the patterns automated submissions leave behind:

 1. A site-specific hidden field catches bots that fill every input.
 2. A signed timestamp identifies implausibly fast submissions.
 3. Secure tokens and referrer checks test whether the request came through the expected
    form flow.
 4. A built-in blocklist catches common spam content.
 5. A weighted scoring engine combines those signals and decides whether to allow, 
    hold, or block the submission.

Real visitors keep the familiar WordPress comment experience. The protection stays
in the background.

#### Privacy & Data Handling

Core comment detection is performed on your site and does not require a remote content-
scoring service. SpamJam stores minimal blocked-event metadata locally for dashboard
statistics and removes old events after the configured retention period. Personal
recovery data is off by default; if you enable it, SpamJam excludes passwords, nonces,
security tokens, CAPTCHA values, and CSRF fields from recoverable form data.

Some optional licensing, update, geographic blocking, and premium blocklist features
connect to external services when used. Review your site’s privacy obligations and
enabled settings as you would with any WordPress plugin.

## 설치

 1. In WordPress, go to **Plugins > Add New**.
 2. Search for **SpamJam**.
 3. Click **Install Now**, then **Activate**.
 4. Your comment forms are protected immediately. Open **SpamJam** in the admin menu
    to review statistics or adjust settings.

You can also upload the plugin ZIP from **Plugins > Add New > Upload Plugin**.

## FAQ

### Does SpamJam work immediately after activation?

Yes. Core comment protection is enabled by default with sensible settings. You can
fine-tune it from the SpamJam admin screen, but you do not need to configure an 
API key or build rules before getting protection.

### Will this slow down my site?

SpamJam is designed to stay focused and load its comment-protection script only 
on pages where comments are open. It has no jQuery dependency, and premium feature
files load conditionally when their features are enabled.

### Will my users see captchas?

No. SpamJam’s core protection uses hidden traps, secure tokens, timing, and request
signals instead of CAPTCHA challenges.

### Does this work with my theme?

SpamJam works with standard WordPress comment forms and includes a fallback selector
for themes that use a custom form ID. A developer filter is available for unusual
comment-form markup.

### Does SpamJam work with full-page caches and CDNs?

Yes. SpamJam does not require a page-load AJAX or REST request. Current forms can
be approved normally, while authentic stale forms from page caches such as WP Rocket
or Cloudflare APO preserve the comment and use WordPress moderation when token freshness
cannot be confirmed. Purge cached HTML after changing the site URL or WordPress 
security salts.

### Is this compatible with WooCommerce?

Yes. The free version protects WooCommerce product review forms and declares compatibility
with High-Performance Order Storage (HPOS). SpamJam Pro can also protect WooCommerce
account registration.

### What’s the difference between Free and Pro?

Free focuses on automatic comment and product-review protection. SpamJam Pro adds
registration and third-party form coverage, custom rules, an actionable spam inbox,
targeted blocking, deeper analytics, reporting, multisite synchronization, and white
labeling. Every Pro license includes the complete feature set; licenses differ only
by the number of sites covered.

### How does geographic blocking work?

SpamJam Pro can block comments from selected country codes. When enabled, SpamJam
uses an external IP geolocation lookup and caches the result to reduce repeat requests.

### What is rate limiting?

Rate limiting caps how many comment submissions one IP address can make during a
configurable period. It helps contain bursts without changing the experience for
ordinary commenters.

### Can I see what spam was blocked?

SpamJam Pro adds a searchable inbox for blocked events, reasons, sources, and review
status. You can configure retention and choose whether to keep the minimum recovery
data needed to restore a false-positive comment.

### Does this work with other anti-spam plugins?

It may, but running multiple plugins that modify or validate the same comment form
can create duplicate checks or conflicts. Test the combination on a staging site
and avoid overlapping protection where possible.

### Will SpamJam block legitimate comments?

No anti-spam system can promise zero false positives. SpamJam reduces the risk by
combining several signals and holding suspicious edge cases for moderation when 
appropriate. SpamJam Pro adds false-positive review and recovery tools.

### Do you offer support?

Free users can use the WordPress.org support forum. SpamJam Pro customers can contact
priority support.

### Is my data sent to third parties?

Core comment detection runs locally and does not require sending comment content
to a remote scoring API. Optional features may connect to external services, and
optional logs are stored in your WordPress database. See the Privacy & Data Handling
section above and assess the settings you enable for your own privacy requirements.

## 후기

이 플러그인에 대한 평가가 없습니다.

## 기여자 & 개발자

“SpamJam – Anti-Spam Protection for Comments & Forms”(은)는 오픈 소스 소프트웨어입니다.
다음의 사람들이 이 플러그인에 기여하였습니다.

기여자

 *   [ Matt Biscay ](https://profiles.wordpress.org/skyminds/)
 *   [ Freemius ](https://profiles.wordpress.org/freemius/)

[자국어로 “SpamJam – Anti-Spam Protection for Comments & Forms”(을)를 번역하세요.](https://translate.wordpress.org/projects/wp-plugins/spamjam)

### 개발에 관심이 있으십니까?

[코드 탐색하기](https://plugins.trac.wordpress.org/browser/spamjam/)는, [SVN 저장소](https://plugins.svn.wordpress.org/spamjam/)
를 확인하시거나, [개발 기록](https://plugins.trac.wordpress.org/log/spamjam/)을 
[RSS](https://plugins.trac.wordpress.org/log/spamjam/?limit=100&mode=stop_on_copy&format=rss)
로 구독하세요.

## 변경이력

#### 3.3.0 – 2026-10-23

 * Security – Validates comment trap and token types, lengths, and formats; detects
   filled “0” traps; and binds signed timing tokens to the site, post, and comment
   or review context.
 * Compatibility – Preserves comment text from expired cached forms and sends uncertain
   submissions to moderation without adding a refresh request.
 * Moderation – Checks subscriber and customer comments, retains trusted moderator
   bypasses, and preserves earlier spam, trash, and error decisions.
 * Accessibility – Uses unique hidden-trap IDs, preserves theme textarea IDs, and
   scopes JavaScript to each comment form.
 * Diagnostics – Separates stable observed-signal codes from final decisions without
   logging successful comments, raw tokens, or comment bodies.
 * Quality – Adds controlled-clock comment regressions, generated-markup checks,
   and multiple-form JavaScript coverage.
 * Integrations – Hardens all advertised Pro form adapters and registration fields
   against malformed or oversized values, applies the core blocklist to normalized
   form content, and reports detected versus enabled integrations accurately.
 * Settings – Aligns country lists, IPv6 CIDR validation, rate-limit defaults, detection
   fallback registration, blocklist validation, and protection descriptions across
   the admin UI and runtime.

## 기초

 *  버전 **3.3.0**
 *  최근 업데이트: **5일 전**
 *  활성화된 설치 **100+**
 *  워드프레스 버전 ** 6.2 또는 그 이상 **
 *  다음까지 시험됨: **7.1.3**
 *  PHP 버전 ** 7.4 또는 그 이상 **
 *  언어
 * [English (US)](https://wordpress.org/plugins/spamjam/)
 * 태그:
 * [comment spam](https://ko.wordpress.org/plugins/tags/comment-spam/)[honeypot](https://ko.wordpress.org/plugins/tags/honeypot/)
   [registration spam](https://ko.wordpress.org/plugins/tags/registration-spam/)
   [security](https://ko.wordpress.org/plugins/tags/security/)[spam protection](https://ko.wordpress.org/plugins/tags/spam-protection/)
 *  [고급 보기](https://ko.wordpress.org/plugins/spamjam/advanced/)

## 평점

아직 제출된 리뷰가 없습니다.

[Your review](https://wordpress.org/support/plugin/spamjam/reviews/#new-post)

[모든  리뷰 보기](https://wordpress.org/support/plugin/spamjam/reviews/)

## 기여자

 *   [ Matt Biscay ](https://profiles.wordpress.org/skyminds/)
 *   [ Freemius ](https://profiles.wordpress.org/freemius/)

## 지원

할 말 있으신가요? 도움이 필요하신가요?

 [지원 포럼 보기](https://wordpress.org/support/plugin/spamjam/)

## 기부

이 플러그인이 발전하도록 도우시겠습니까?

 [ 이 플러그인에 기부하기 ](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=DNSC3NVBWR66L)