Contact Form 7
Use the Nolgard WordPress plugin to protect Contact Form 7 submissions.
Download the WordPress plugin (zip)
Version 1.0.0. Requires WordPress 6.0 and PHP 7.4. Not on wordpress.org yet.
Setup
- Add a site in Nolgard and list your WordPress origins, for example
https://example.com. Copy the site key and secret. - In WordPress, go to Plugins → Add New → Upload Plugin. Select the zip and activate the plugin.
- Open Settings → Nolgard. Paste both keys, select the forms to protect and save.
- Click Test connection.
Select Contact Form 7. This checkbox appears only when Contact Form 7 is active. It covers every form on the site. There is no per-form setting or shortcode to add.
What visitors see
| Decision | Result |
|---|---|
allow, limit | Mail is sent as usual. |
block | The submission is marked as spam. The visitor sees Contact Form 7's error. |
shadow | No mail is sent. The visitor sees the normal success message. |
Submissions are logged with the action name contact. Each attempt gets a fresh token, including retries after a validation error.
Caveats
Themes or scripts that call form.submit() directly skip the submit event. They need their own integration.