BotShield CAPTCHA for Contact Form 7

Stop contact form spam instantly with BotShield CAPTCHA for Contact Form 7. This all-in-one spam protection plugin integrates Google reCAPTCHA (v2 Checkbox & v3 Invisible), Cloudflare Turnstile (Privacy-Focused), and lightweight Built-in Arithmetic/Image Challenges to block bots while letting real users pass.

Whether you need strict security or a friction-free user experience, BotShield gives you complete control over your specific form protection needs. No more spam submissions, fake leads, or automated bot attacks.

Protect Your WooCommerce Store with Enterprise-Grade Security. Upgrade to SecureGate CAPTCHA for ultimate full-site protection. Instantly block spam, fake registrations, and checkout fraud using intelligent Cloudflare Turnstile, Google reCAPTCHA, hCaptcha, and powerful Geo-Blocking rules—keeping your store fast, secure, and entirely bot-free.

Key Features & Benefits

• Multi-Provider Support: Choose between Google reCAPTCHA, Cloudflare Turnstile, or Self-hosted challenges.
• Google reCAPTCHA Integration: Supports both v2 (“I’m not a robot”) and v3 (Invisible) keys.
• Cloudflare Turnstile: The modern, privacy-friendly alternative that stops bots without annoying puzzles.
• Lightweight Built-in Protection: Use simple Math or Image CAPTCHAs without needing any external API keys.
• Seamless Contact Form 7 Integration: Adds a dedicated “BotShield” tag generator button directly to the CF7 editor.
• Mobile Optimized: Fully responsive challenges that work perfectly on smartphones and tablets.
• GDPR Compliant Options: Turnstile and Built-in modes offer excellent privacy compliance.
• Accessibility Ready: WCAG 2.1 compliant designs for screen reader support.

Flexible Protection Options

1. Google reCAPTCHA (The Industry Standard) * v2 Checkbox: The classic “I’m not a robot” checkbox users trust. * v3 Invisible: valid users are verified in the background with zero interaction.

2. Cloudflare Turnstile (Privacy-First) * Verify visitors without solving complex puzzles. Smart, fast, and respectful of user privacy.

3. Built-in Challenges (No Keys Required) * Arithmetic: Simple math questions (e.g., 7 + 2 = ?) effective against basic bots. * Alphanumeric: Distorted text images for traditional verification. * Zero external dependency, 100% self-hosted.

Perfect For

• Contact forms
• Registration forms
• Quote request forms
• Newsletter signups
• Any Contact Form 7 form needing spam protection

Requirements

• WordPress 5.0 or higher
• Contact Form 7 plugin (must be active)
• PHP 7.4 or higher
• GD PHP extension for image CAPTCHAs

Privacy Policy

BotShield CAPTCHA does not: * Collect any personal data * Store user information * Transmit data to external servers * Use cookies or tracking * Share information with third parties

All CAPTCHA processing happens locally on your WordPress server. The plugin is fully GDPR compliant.

Support & Documentation

• Support Forum: https://wordpress.org/support/plugin/botshield-captcha/
• Developer Website: https://www.rsabbir.com/

Contributing

Contributions are welcome! Contact the developer or visit the GitHub repository to contribute to this plugin’s development.

Credits

• Developed by R. Sabbir (https://www.rsabbir.com/)
• Tested with Contact Form 7 6.1.4 and later

Technical Specifications

Server Requirements

• WordPress 5.0 or higher
• PHP 7.4 or higher
• Contact Form 7 plugin (active)
• GD PHP extension (for image CAPTCHAs)

Browser Support

• Chrome (latest versions)
• Firefox (latest versions)
• Safari (latest versions)
• Microsoft Edge (latest versions)
• Mobile browsers (iOS Safari, Chrome Mobile)

Security Features

• Token-based validation system
• HMAC-SHA256 signature verification
• Automatic token expiration (5 minutes)
• XSS protection
• CSRF token protection
• No session storage required

Performance

• Code: ~50KB total size
• Assets: Minified and optimized
• Loading: Conditional asset loading on relevant pages
• HTTP Requests: Zero external requests
• Caching: Compatible with all major WordPress cache plugins