Spam Protection
JOOMLA ONLY
The Spam Protection tab configures two complementary spam prevention features: arbitrary string detection in request parameters, and integration with the SecurityCheck Pro Spam Protection plugin for checking users against the StopForumSpam database during registration.
Arbitrary String Detection
| Option | Description |
|---|---|
| Detect Arbitrary Strings | When enabled, the firewall checks request parameters for strings that match known spam patterns (promotional text, URL patterns, etc.). This operates independently of the Spam Protection plugin. |
Check Users (requires Spam Protection plugin)
The following options are only available when the SecurityCheck Pro Spam Protection plugin is installed and enabled. If the plugin is not installed, an informational notice is shown.
| Option | Description |
|---|---|
| Check if User is Spammer | Enables checking registered users against the StopForumSpam database during login or registration. |
| Spammer Action | What to do when a spammer is detected: Do Nothing (log only) or Add IP to Dynamic Blacklist. |
| Write Log | Records spam detections in the firewall log. |
| Spammer Limit | Number of spam reports required before the user is considered a confirmed spammer. |
| What to Check | Which data points to check against the spam database: Email address, IP address, and/or Username. Multi-select. |
| URLs to Include | A textarea of site URLs where spam checking is applied. Leave empty to check all pages. |
Honeypot Protection
| Option | Description |
|---|---|
| Forms to Include | A textarea of form identifiers or URLs where a honeypot hidden field is injected. |
To configure the honeypot, find the id attribute of the form you want to protect:
Enter that form id here. If a bot fills in the hidden honeypot field, the IP is added to the blacklist or dynamic blacklist (depending on the Action setting) and a log entry is recorded:
