=== Honeypot Anti Spam for Forminator Forms ===
Contributors: kgmservizi
Donate link: https://kgmservizi.com
Tags: honeypot, forminator, antispam, spam
Requires at least: 6.4
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 0.3
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

A lightweight honeypot that blocks spam bots on Forminator contact, payment and custom forms. No captcha, no setup.

== Description ==

**Doesn't work for you? Open a support ticket: we answer within 48 hours.**

**JavaScript must be enabled in the visitor's browser for submissions to go through.**

A lightweight honeypot for Forminator Contact Form, Payment Form & Custom Form Builder. Spam protection without captchas.

Activate the plugin and it works on all your Forminator forms. It adds a hidden field **with JavaScript** to every form, including forms loaded with AJAX or inside popups, and rejects a submission when that field is missing (the bot did not run JavaScript) or filled in (the bot filled every field).

You can generate a new name for the hidden field from the settings page under the WordPress Tools menu. Changing it from time to time helps against bots that learn it.

The plugin stores no personal data: it only keeps a counter of blocked submissions.

== Installation ==

1. Upload the plugin files to the '/wp-content/plugins/' directory, or install the plugin through the WordPress add plugins page directly.
2. Activate the plugin through the 'Plugins' page in WordPress. Forminator must be installed and active.
3. Clear your cache.
4. You can find the settings to change the honeypot field name under Tools.

== Frequently Asked Questions ==

= Does it stop every spam message? =

No. It stops generic bots, which are most of them. A bot written specifically for your site can read the field name from the page and get past it: changing the name from time to time helps.

= Do visitors without JavaScript get blocked? =

Yes. The hidden field is added with JavaScript, so a submission without it is treated as spam.

= I changed the field name and now real messages are blocked. Why? =

Your pages are cached with the old name. Clear the page cache (caching plugin, hosting cache or CDN) after saving a new name.

== Changelog ==

= 0.3 =
* The hidden field is now added to forms loaded with AJAX or inside popups, which were wrongly blocked before.
* If the field name is missing (for example on multisite subsites or after a manual upload), a new one is created automatically instead of blocking every submission.
* Stricter check: a field filled with "0", spaces or an array now counts as spam.
* The spam counter is no longer loaded on every page.
* No more jQuery dependency; the script is loaded only when Forminator is active.
* Accessibility: the hidden field is skipped by keyboard and screen readers; the settings page uses a real button.
* Admin texts are translatable.
* Requires the Forminator plugin (WordPress 6.5+ enforces it).
* Minimum requirements raised to WordPress 6.4 and PHP 7.4, the same as current Forminator.

= 0.2.2 =
* Readme update 6.6 compatibility

= 0.2.1 =
* Bugfix and readme update 6.4 compatibility

= 0.2 =
* Protection log

= 0.1 =
* Initial release


== Upgrade Notice ==

= 0.3 =
Fixes real submissions being blocked on forms loaded with AJAX or in popups, and on sites where the field name was missing. Recommended for all users.

= 0.2.2 =
Readme update 6.6 compatibility

= 0.2.1 =
Bugfix and readme update 6.4 compatibility

= 0.2 =
Protection log.

= 0.1 =
Initial release.