FormBuilder Blacklist

[pmichaelis]

FormBuilderBlacklist – content-based spam filtering for FormBuilder

FormBuilderBlacklist checks the content of submissions against blacklists and a few spam heuristics.
It's a companion to FormBuilderAltcha: ALTCHA keeps bots out, and this one catches the spam that still gets through, for example from humans or bots that run JavaScript.

Checks (all configurable per form)

• Keyword blacklists: gambling, medication, merchandise, trading, software, services, hosting, URLs, injection and more. Each list can be enabled on its own, and keywords only match as whole words.
• Disposable email addresses, using mailchecker
• Maximum number of links per submission
• BBCode and HTML links ([url=…], <a href…>)
• Foreign scripts: flags text that is mostly Cyrillic, CJK, Arabic or Thai
• Fields to check: all text fields or only the ones you select
• You enable it under Actions › Filter spam › Blacklist & content check. FormBuilder's own setting "What should happen when spam is detected?" decides what happens to a match: discard silently, show an error, or save it as a spam entry. If you turn on logging, matches are also written to form-builder-blacklist. The module is translatable, and a German translation is included.

Requirements: PHP 8.1+, ProcessWire 3.0.200+, FormBuilder

You don't need Composer, because all dependencies are bundled. To install, use Modules › New › Add Module From URL:
https://github.com/pmichaelis/FormBuilderBlacklist/archive/HEAD.zip

GitHub: https://github.com/pmichaelis/FormBuilderBlacklist

The blacklists come from IQAndreas/php-spam-filter.

If you run into false positives or have suggestions for the lists, please let me know.