=== Honeypot Guard – Silent Anti-Spam ===
Contributors: mantasdigital
Donate link: https://www.mantasdigital.com/
Tags: antispam, honeypot, spam protection, contact form 7, security
Requires at least: 5.0
Tested up to: 6.9
Stable tag: 2.1.0
Requires PHP: 7.4
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Anti-spam protection for forms, signups, and comments using advanced honeypot techniques. No CAPTCHAs, no user friction.

== Description ==

**Honeypot Guard** is a powerful, privacy-focused anti-spam solution that protects your WordPress forms without annoying your visitors with CAPTCHAs. Using invisible detection techniques, it blocks spam bots while maintaining a seamless user experience.

= Why Choose Honeypot Guard? =

Unlike CAPTCHA-based solutions that frustrate users and hurt conversions (studies show CAPTCHAs reduce form submissions by 10-40%), Honeypot Guard provides **superior spam protection** with **zero user friction**.

= How It Works =

Honeypot Guard uses multiple layers of intelligent detection to catch spam automatically:

* **Invisible Honeypot Fields** - Hidden fields that real users never see, but bots fill out automatically
* **Dynamic Field Rotation** - Constantly changing field names make it harder for sophisticated bots to adapt
* **Timestamp Validation** - Detects instant submissions (bots can't read like humans)
* **Intelligent Gibberish Detection** - Catches keyboard mashing and random text patterns
* **Advanced Heuristic Analysis** - Pattern-based detection of common spam characteristics
* **Character Script Filtering** - Optionally block submissions containing specific character scripts (Cyrillic, Chinese, etc.)
* **Cookie Verification** - Proves JavaScript execution in a real browser environment

= Key Features =

* **Zero User Friction** - Completely invisible protection, no annoying puzzles
* **Privacy-Focused** - All processing on your server, no third-party tracking by default
* **Granular Blacklisting** - Block by email, domain, IP address, or keywords
* **Rate Limiting** - Prevent spam floods with configurable submission limits
* **Detailed Spam Logs** - View blocked submissions with one-click IP blocking
* **Multi-Language Admin** - Available in 9 languages (English, German, Spanish, Italian, Lithuanian, Swedish, Polish, Estonian, Spanish-Mexico)
* **GDPR Compliant** - No data sent to external services (unless you enable optional AI detection)
* **Works Automatically** - Integrates seamlessly with popular form plugins

= Supported Form Plugins =

* Contact Form 7
* WPForms
* Gravity Forms
* Ninja Forms
* Formidable Forms
* WordPress Registration Forms
* WordPress Comments
* WooCommerce Checkout & Registration
* bbPress Forums
* Any HTML form with minimal configuration

= Advanced Protection Options =

* **AI-Powered Gibberish Detection** (Optional) - Use OpenAI or Anthropic APIs for advanced content analysis
* **Meta Pixel Protection** - Block form submission tracking until verification
* **Custom Honeypot Field Names** - Define your own field names for added security
* **Whitelist Trusted Users** - Bypass checks for logged-in users or specific IPs

= Privacy & Performance =

Honeypot Guard is designed with privacy and performance in mind:

* **Lightweight** - Adds virtually zero latency to your site
* **No External Calls** - Basic protection requires no API calls
* **Cache Compatible** - Works with WP Super Cache, W3 Total Cache, WP Rocket, LiteSpeed, and more
* **No Cookies Required** - Core functionality works without cookies (optional cookie verification available)

= Professional Support =

Need help? Visit [mantasdigital.com/honeypot-guard](https://www.mantasdigital.com/honeypot-guard/) for documentation and support.

== Installation ==

1. Upload the plugin files to `/wp-content/plugins/honeypot-guard/` or install through the WordPress plugins screen
2. Activate the plugin through the 'Plugins' screen in WordPress
3. Go to Settings > Honeypot Guard to configure protection options
4. That's it! Your forms are now protected

== Frequently Asked Questions ==

= Does this work with Contact Form 7? =

Yes! Honeypot Guard automatically integrates with Contact Form 7, WPForms, Gravity Forms, Ninja Forms, and most other popular form plugins without any configuration.

= Will this slow down my site? =

No. Honeypot Guard is lightweight and runs entirely on your server. Basic protection requires no external API calls, adding virtually zero latency.

= Does it work with caching plugins? =

Yes. Honeypot Guard is compatible with WP Super Cache, W3 Total Cache, WP Rocket, LiteSpeed Cache, and other popular caching solutions.

= Can I whitelist certain IPs or users? =

Yes. Go to Settings > Honeypot Guard and enable whitelist options for logged-in users or specific IP addresses.

= What languages are supported? =

The admin interface is available in: English, German, Spanish, Spanish (Mexico), Italian, Lithuanian, Swedish, Polish, and Estonian.

= Is it GDPR compliant? =

Yes. Honeypot Guard does not send any data to external services by default. All processing happens on your server. IP addresses are logged only for spam protection and can be configured for automatic deletion.

= Can I use this with Cloudflare? =

Yes. Honeypot Guard automatically detects the real visitor IP when behind Cloudflare or other reverse proxies.

= Does it work with WooCommerce? =

Yes. Honeypot Guard protects WooCommerce registration and checkout forms automatically when enabled.

== Screenshots ==

1. Dashboard - Overview of spam protection statistics with real-time metrics
2. Settings - Configure honeypot fields, detection methods, and protection options
3. Blacklists - Manage email, domain, IP, and keyword blacklists with hit tracking
4. Spam Logs - View blocked submissions with detailed reasons and one-click IP blocking

== Changelog ==

= 2.1.0 =
* Rebranded from Open Honeypot to Honeypot Guard – Silent Anti-Spam
* Improved input sanitization for enhanced security
* Consolidated inline scripts into enqueued JavaScript file
* Moved inline styles to CSS file for better performance
* Fixed output buffering to ensure proper buffer closure
* Added additional translated strings for better localization
* Updated plugin URLs and documentation

= 2.0.2 =
* Fixed all WordPress Plugin Check errors for WordPress.org compliance
* Added proper output escaping throughout the plugin
* Replaced date() with gmdate() for timezone consistency
* Replaced parse_url() with wp_parse_url() for WordPress compatibility
* Added prefixed helper functions (open_honeypot_t, open_honeypot_e, open_honeypot_url)
* Improved SQL query security with proper escaping
* Fixed plugin header for WordPress.org submission

= 2.0.1 =
* Added cookie verification option for JavaScript execution proof
* Added blocked entries management for viewing spam patterns
* Improved gibberish detection with multiple algorithms
* Added South Asian script blocking option
* Multi-language sidebar menu items
* Updated translations for all 9 languages

= 2.0.0 =
* Complete rewrite with modern architecture
* Added AI-powered gibberish detection (OpenAI/Anthropic)
* Added granular blacklisting (email, domain, IP, keywords)
* Added rate limiting
* Added multi-language support (9 languages)
* Added spam log dashboard with one-click IP blocking
* Added Contact Form 7 rate limiting fix
* Improved heuristic analysis
* Added WPML compatibility

= 1.0.0 =
* Initial release
* Basic honeypot protection
* Timestamp validation
* Simple blacklisting

== Upgrade Notice ==

= 2.1.0 =
Major rebranding to Honeypot Guard with security improvements and WordPress Plugin Check compliance. Recommended update for all users.

= 2.0.2 =
Security and compliance fixes. Recommended update for WordPress.org compatibility.

= 2.0.1 =
New features: Cookie verification, improved gibberish detection, translated menu items. Recommended update.

= 2.0.0 =
Major update with AI detection, granular blacklisting, rate limiting, and multi-language support. Database will be upgraded automatically.

== Privacy Policy ==

Honeypot Guard collects and stores:

* IP addresses of form submissions (for spam detection and blocking)
* Form submission data flagged as spam (for review and pattern detection)
* Timestamps of submissions (for rate limiting)

This data is stored in your WordPress database and is **never sent to external services** unless you enable optional AI-powered detection.

You can configure automatic deletion of spam logs in Settings > Honeypot Guard.

== External Services ==

This plugin can optionally connect to external AI services for advanced gibberish detection. These services are **disabled by default** and must be explicitly enabled by the administrator.

= OpenAI API (Optional) =

When AI gibberish detection is enabled and configured with an OpenAI API key:

* **What it does:** Analyzes suspicious form field content to detect nonsensical or spam text
* **Data sent:** Only the specific text field being analyzed (not the entire form submission)
* **When sent:** Only when a submission is flagged as potentially suspicious and AI detection is enabled
* **Service provider:** OpenAI, L.L.C.
* **Terms of use:** https://openai.com/policies/terms-of-use
* **Privacy policy:** https://openai.com/policies/privacy-policy

= Anthropic API (Optional) =

When AI gibberish detection is enabled and configured with an Anthropic API key:

* **What it does:** Analyzes suspicious form field content to detect nonsensical or spam text
* **Data sent:** Only the specific text field being analyzed (not the entire form submission)
* **When sent:** Only when a submission is flagged as potentially suspicious and AI detection is enabled
* **Service provider:** Anthropic, PBC
* **Terms of use:** https://www.anthropic.com/legal/consumer-terms
* **Privacy policy:** https://www.anthropic.com/legal/privacy

**Important:** These services are entirely optional. Honeypot Guard provides effective spam protection without any external services using its built-in detection methods.

== Additional Info ==

* [Plugin Website](https://www.mantasdigital.com/honeypot-guard/)
* [Documentation](https://www.mantasdigital.com/honeypot-guard/)
* [Support](https://www.mantasdigital.com/)
* [GitHub Repository](https://github.com/mantasdigital/honeypot-guard)
