內容簡介
Wellenbrecher 是一款針對表單、評論及 WooCommerce 的反垃圾郵件外掛，能有效防止垃圾郵件而不影響用戶體驗。所有評分均在本地伺服器進行，無需第三方服務，確保資料安全與隱私。
【主要功能】
• 支援多種表單建構器，無需額外設定
• 本地伺服器評分，無需外部API
• 提供可解釋的評分與決策紀錄
• 垃圾郵件隔離與快速釋放功能
• 隱形防護，無需驗證碼或拼圖
• 觀察模式可記錄初期數據
外掛標籤
開發者團隊
② 後台搜尋「Wellenbrecher – Anti-Spam for Forms, Comments and WooCommerce」→ 直接安裝（推薦）
原文外掛簡介
Most anti-spam plugins for WordPress guard one door: the comment form. Wellenbrecher guards the ones that cost you money. User registration, the WooCommerce checkout and the eight form builders that carry the traffic on real sites are covered the moment the plugin is active, comments and trackbacks included. Nothing is sent to a third party, and no visitor is asked to prove they are human.
Every submission is scored on your own server. There is no account to create, no API key to enter, no request quota, and no data processing agreement to sign, because no submission ever leaves your site. That is the difference that matters under the GDPR: a filter that ships every comment and every contact request to a third-party service is a processing step you have to declare, find a legal basis for and tell your visitors about. This one is not.
More than thirty small signals contribute points to the score: a hidden honeypot field, a form token, whether JavaScript ran, how fast the form was filled in, request headers, link density, mixed writing systems, throwaway email domains, repeat offenders from your own log, and a filter that learns from your own moderation decisions. Three zones decide the outcome: let it through, hold it in quarantine, or block it.
Nothing disappears silently. Every decision lands in the log with its score and the rules that produced it, so a legitimate submission that was caught is visible instead of lost. Releasing it takes one click, and the sender is trusted again afterwards.
Which forms are covered
Wellenbrecher hooks into each builder’s own submission path, so there is nothing to configure. Install the plugin, and these are covered as soon as the builder is active:
Contact Form 7
WPForms
Gravity Forms
Jetpack forms
Fluent Forms
Forminator
Ninja Forms
MetForm
Alongside them: WordPress comments and trackbacks, user registration including multisite and the WooCommerce account form, WooCommerce product reviews, the WooCommerce checkout, and the Hafenstudios Leadlotse form plugin.
Coverage is not identical everywhere, and it should not be sold as if it were. Where a builder renders an ordinary HTML form, Wellenbrecher adds its own hidden signals to it and gets the full picture. Ninja Forms and MetForm rebuild their form in the browser and submit it through their own endpoint, so those extra fields cannot be attached; both are still scored, but on content and request signals only, not on behaviour. User registration is scored the same way, on content and request signals, because the registration form is WordPress’ own and carries no extra fields. The classic WooCommerce checkout does get the hidden fields and the honeypot; the block-based checkout submits through the Store API and is scored on content and request signals as well.
What you get
An explainable score with three zones. Every rule can be switched off or reweighted, and the breakdown is shown for each decision
Observation mode for the first seven days: everything is recorded, nothing is blocked, so you see what would have happened before you arm it
A log with a release button, so a false positive costs one click instead of a customer
A learning filter trained by your own moderation, entirely on your server
Quarantine for form submissions: the log keeps the submitted values and releases them per row
Comment quarantine in the native WordPress spam folder, with a column that shows the score
A dashboard widget with the last 14 days, the totals for 7 and 30 days and a breakdown per channel
Statistics and a CSV export of the log for your own records
Move-in help: reads what a previously installed anti-spam plugin had configured, shows what maps across, and imports it on your confirmation. Nothing is deleted and no service keys are read
Your own keyword list, and the option to remove the XML-RPC methods for comments and pingbacks
Invisible to visitors. No captcha, no puzzle, no cookie
Fail-open by design: if the plugin hits an internal error, the submission passes through to normal moderation instead of vanishing
No external services
Wellenbrecher makes no outbound request. The scoring, the word lists, the learning filter, the statistics and the log all live on your server. There is no telemetry, no remote font, no remote script and no phone-home of any kind.
Privacy
IP addresses are never stored in clear text, only as a non-reversible check value under a key that rotates weekly
Of email addresses only the domain is kept
Retention is automatic: blocked and flagged rows after seven days, quarantine after 30 days, both adjustable
Suggested text for the WordPress privacy policy tool, plus hooks into the WordPress data export and erasure requests
Not a security plugin
Wellenbrecher stops spam, not attacks. It brings no login brute-force protection, no firewall and no .htaccess changes, so it stays out of the way of a dedicated security plugin.
Wellenbrecher Pro
The free version is not a trial and nothing in it is held back. Every channel, all thirty-six rules, the learning filter, the log and the reports are in the version you just installed, and they stay there.
Pro adds four optional rules that do the one thing this plugin otherwise refuses to do, which is talk to the outside world. Each one is off until you switch it on, and each one states its data flow before you do.
A check against a public register of reported abusive IP addresses
Country of origin, read from a local database file instead of a lookup service
A datacenter rule that tells submissions from server networks apart from ordinary visitors
A second opinion from a language model of your choosing, asked only about scores in the grey zone between the two thresholds, and never given an email address
Pro also keeps the throwaway-domain list current by itself instead of shipping it with each release.
Details and pricing: https://hafenstudios.com/wellenbrecher
