Official yStore plugin
AntiSpam
Layered spam protection for the craftcms/contact-form plugin — honeypots, scoring, geo and rate-limit rules, with full logging, IP bans and CP management.
Craft 5
Nine rules, stacked before anything reaches your inbox
Basic, or advanced CSS+JS honeypots.
Fill-time check & submission fingerprint.
Keyword list, link count, configurable threshold.
Your own list plus a built-in disposable-domain list.
GeoLite2 or ip-api.com.
Reject phone numbers that don’t match the expected country format.
Manual or automatic after N hits.
Every blocked attempt with the rule that caught it.
Delivered form mails carry the verdict, so you see borderline ones at a glance.
- 3 links in message body
- Keyword match — "crypto", "loan"
- Submitted in 1.2s (min. 3s)
- Honeypot field — empty, as expected
Over threshold — submission blocked and logged.
Rules first. A challenge only when they’re not enough
Shown only when a submission’s score is borderline — not on every form load.
Invisible challenge, by default.
Alternate provider, gated behind an active license key.
Toggled per form in Settings → Integrations.
Know about a spam wave before your inbox does
A weekly digest keeps you posted on volume and bans. A threshold alert fires the moment blocked submissions spike, routed wherever your team already watches for incidents.
42 blocked submissions in the last 10 minutes on Contact form, up from a 3/min baseline. 6 IPs auto-banned.
Every rule, log and ban lives in the CP
Spam Logs and Banned IPs give editors a plain view of what was caught and why. Settings is split into focused sub-pages, each with the toggles and conditional fields for that layer of protection.
Why teams choose this plugin
It’s not a side project. It’s an official, production-grade part of the yStore platform — maintained on the same release cycle.
Official plugin
Craft CMS
yStore
One price. Yours to keep.
Pay once per project, own it for good. No monthly fees and no revenue share on your payments.
per Craft project
You will assign the license to your domain after purchase, in your account under My licenses.
Need custom rules for your forms?
Custom scoring, additional challenge providers, bespoke notification routing. Tell us what you need.