Challenge & Block

Access Blocked Message

This message only shows if spammers or false positive valid visitors are rejected at the time the login or comment form is displayed. You can use the shortcode [reason] to include the block reason code with the message. You can also use [ip] in your message which would be the user’s IP address. (You may not want to give spammers hints on how they were blocked.)

Enable Block by Username

This is usually not useful as spammers can change the user ID that they use. These are checked after the Allow List so the Allow List overrides any blocking.

Routing and Notifications

Send Visitor to Another Web Page

Redirect the visitor to a different page. This can be a custom page explaining terms of service for example.

Blocked users see the Allow Request form

Users can see the form to add themselves to the request list, but lots of spammers fill it out randomly. This hides the request form.

Notify Web Admin when a user requests to be added to the Allow List

If a web admin approves a request, the requester will be automatically notified via email.

Notify Requester when a Web Admin has approved their request to be added to the Allow List

If a web admin approves a request, the requester will be automatically notified via email.

WordPress Email Notifications ^New!

Out of the box, WordPress loves sending you emails. Did one of 50 plugins you have installed automatically update? That’s an email. Did one of hundreds of users on your website forget his/her password and issue a reset request? Another email. It’s all a little much and can be pretty spammy. It’s especially true if your email is the admin on several wordpress websites. We have introduced 10 granular controls that allow you to disable emails that you don’t feel are necessary flooding your inbox.

1. New user notification to user (admin and user)
2. Password change notification to admin
3. Automatic WordPress core update email
4. Automatic WordPress plugin update email
5. Automatic WordPress theme update email
6. Notify Post author
7. Notify Moderator
8. Password change notification to user
9. Email address change notification to user
10. Password forgotten email to user

CAPTCHA

Second Chance CAPTCHA Challenge

The plugin is extremely aggressive and will probably block some small number of legitimate users. You can give users a second chance by displaying a CAPTCHA image and asking them to type in the letters that they see. This prevents lockouts. This option will override the email notification option above. By default, the plugin will support the arithmetic question, which is okay. For better results, use Google’s reCAPTCHA, or you can try SolveMedia’s CAPTCHA

Google reCAPTCHA API Key

These API keys are used for displaying a Google reCAPTCHA on your site. You can display the reCAPTCHA in case a real user is blocked, so they can still leave a comment. You can register and get an API key at https://www.google.com/recaptcha/admin#list. If the keys are correct, you should see the reCAPTCHA on the Challenge & Block page.

Solve Media CAPTCHA API Key

This API key is used for displaying a Solve Media CAPTCHA on your site. You can display the CAPTCHA in case a real user is blocked, so they can still leave a comment. You can register and get an API key at https://portal.solvemedia.com/portal/public/signup. If the keys are correct, you should see the reCAPTCHA on the Challenge & Block page.