=== Captcha Free Anti Spam for Contact Form 7 (Simple No-Bot) ===
Contributors: lilaeamedia
Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=DE4W9KW7HQJNA
Tags: contact form 7, auto captcha, bot blocker, spam blocker, invisible recaptcha, honeypot, antispam, anti-spam, captcha, anti spam, form, forms, contactform7, contact form, cf7, recaptcha, no captcha
Requires at least: 5.2
Tested up to: 5.2
Stable tag: 2.1.3
Requires PHP: 7
License: GPLv2 or later
License URI: http://www.gnu.org/licenses/gpl-2.0.html

Simple, lightweight, no captcha, no configuration. Just works.

== Description ==

Simple No-Bot uses javascript to detect if Contact Form 7 is being submitted by a spam bot. 

We wrote this when clients were reporting hundreds of bogus contact forms were getting past Honeypot, but did not want to add a captcha that would impact conversions. 

This lightweight script has been extremely effective for eliminating Contact Form 7 spam messages. It does not pretend to be a complete anti spam solution.

== IMPORTANT ==

SNB DISABLES THE SUBMIT BUTTON until the user has made a minimum number of interactions with the form. In most cases it will be enabled after the user
starts typing in the first field. It has not broken your form.

Please report any feedback and false negatives/positives on our support form at http://www.lilaeamedia.com/contact/ before posting a crappy review. Thanks.

== New! Improved! ==

You can now hook Simple No Bot into any form:

$is_spam = FALSE; // you can use whatever flag is being used by your plugin. 
apply_filters( 'snb_test_spam', $is_spam );

The filter will return TRUE if bots are detected.

SNB will keep a log in the plugin's directory for debug purposes if desired. Add the following definition to wp-config.php:

define( 'SNB_DEBUG', TRUE );

We have strengthened the XHR protocol to use SHA1 hashes. Not military grade, but secure enough for our purposes. We have also added some
behavioral analysis to detect pesky bots that can mimic browsers and run scripts.

SNB now keeps a list of IPs as they are flagged as spam and automatically fails them. The oldest IPs are pruned when it reaches 100. If you are 
using W3 Total Cache, the list is flushed when you flush all caches. You can also pass ?snb_flush=true as Admin to do the same thing.

== Installation ==

1. To install from the Plugins repository:
    * In the WordPress Admin, go to "Plugins > Add New."
    * Type "simple no-bot" in the "Search" box and click "Search Plugins."
    * Locate "Simple No-Bot Captcha Alternative for Contact Form 7" in the list and click "Install Now."

2. To install manually:
    * Download the IntelliWidget plugin from https://wordpress.org/plugins/simple-no-bot/
    * In the WordPress Admin, go to "Plugins > Add New."
    * Click the "Upload" link at the top of the page.
    * Browse for the zip file, select and click "Install."

3. In the WordPress Admin, go to "Plugins > Installed Plugins." Locate "Simple No-Bot Captcha Alternative for Contact Form 7" in the list and click "Activate."

== Frequently Asked Questions ==

= How does it work? =

The browser automatically generates a string from input events and passes it to the server via XHR. The server generates a unique token, stores a session in a transient record and returns token to the browser. The browser then injects a new input field to WPCF7 form that contains token and hashed event string. When form is submitted, server compares hashed string to stored event string and rejects form if it does not match or if no corresponding session exists. 

= Does it work without Javascript =

No. Contact forms will fail if Javascript is not enabled.

= Does it require cookies? =

Not currently. We may add more behavioral analysis if the latest generation of JS-empowered bots continues to proliferate.

== Screenshots ==

No screens to shoot.

== Changelog ==

2.1.3 Added general plugin support. Strenghened hashing and XHR protocol. Added spam IP list. Added debug log.
1.0.5 Simplified validation
1.0.2 Change wp nonce functions to wpcf7 nonce functions
1.0 Initial release

== Upgrade Notice ==

Nothing to report yet.

== Support ==

Please report any feedback and false negatives/positives on our support form at http://www.lilaeamedia.com/contact/