Title: Comments Firewall
Author: korchix
Published: 23 Otover 2025
Last modified: 23 Otover 2025
---
Search plugins
# Comments Firewall
By [korchix](https://profiles.wordpress.org/korchix/)
[Download](https://downloads.wordpress.org/plugin/comments-firewall.1.0.2.zip)
* [Details](https://lmo.wordpress.org/plugins/comments-firewall/#description)
* [Reviews](https://lmo.wordpress.org/plugins/comments-firewall/#reviews)
* [Installation](https://lmo.wordpress.org/plugins/comments-firewall/#installation)
* [Development](https://lmo.wordpress.org/plugins/comments-firewall/#developers)
[Support](https://wordpress.org/support/plugin/comments-firewall/)
## Description
Comments Firewall is a powerful anti-spam plugin that provides enterprise-grade
firewall protection for your WordPress comments. It blocks spam before it reaches
your database, eliminating the need for manual moderation while maintaining full
compatibility with your theme and existing comment system.
**Key Features:**
* **Remove Website Field**: Completely eliminates the website field from comment
forms to prevent URL submissions
* **Smart Link Blocking**: Two-mode protection system (Balanced/Strict) blocks
HTTP/HTTPS links with advanced pattern detection
* **Author Name Protection**: Blocks links in commenter names to prevent sophisticated
spam attempts
* **Submission Control**: Granular control over comment submission methods (Form,
REST API, XML-RPC)
* **Force URL Clearing**: Ensures all author URLs are cleared on submission, regardless
of input method
* **Statistics Dashboard**: Real-time tracking of blocked spam comments with visual
dashboard widget
* **Multilingual Ready**: Full translations in 5 languages (English, Spanish, French,
German, Arabic with RTL support)
* **Optional Branding Badge**: Customizable “Protected by Comments Firewall” badge
for your site
* **Theme Compatible**: Works with any theme using standard WordPress comment hooks
* **Lightweight & Secure**: Zero performance impact with admin-only security controls
**How It Works:**
The plugin operates on multiple levels to ensure comprehensive spam protection:
1. **Form Level**: Removes website fields from comment forms via WordPress hooks
2. **Validation Level**: Blocks submissions containing HTTP/HTTPS patterns before
they’re saved
3. **Method Level**: Controls which submission methods (form, API, XML-RPC) are allowed
**Perfect For:**
* Site owners experiencing backlink spam in comments
* Site owners wanting to avoid the hassle of manually managing spam comments
* Sites that want to maintain existing comments while preventing new spam
* Anyone looking for a plugin that blocks all comments containing a link
The plugin maintains full backward compatibility and won’t disrupt your existing
comment workflow or database structure.
## Screenshots
* [[
* Plugin dashboard showing stats about the number of blocked comments
* [[
* Plugin settings page showing all configuration options
* [[
* Comment form with website field removed
## Installation
1. Upload the plugin files to the `/wp-content/plugins/comments-firewall` directory,
or install the plugin through the WordPress plugins screen directly.
2. Activate the plugin through the ‘Plugins’ screen in WordPress.
3. Use the Settings -> Comments Firewall screen to configure the plugin options.
4. That’s it! The plugin will start protecting your site immediately with sensible
defaults.
## FAQ
### Will this plugin delete my existing comments?
No, Comments Firewall never deletes comments. It only prevents new spam comments
from being submitted. All existing comments remain untouched in your database.
### Does this work with my theme?
Yes, the plugin is designed to work with any theme that follows WordPress standards.
It uses core WordPress hooks and doesn’t require theme-specific modifications.
### What’s the difference between Balanced and Strict modes?
Balanced mode blocks standard HTTP/HTTPS URLs and common spam patterns. Strict mode
additionally detects obfuscated links (like hxxp, www without protocol, etc.) and
advanced spam tactics. Start with Balanced and switch to Strict if you still see
spam getting through.
### Can I customize the error messages?
Absolutely! You can customize the blocked comment message through the settings page.
This message is shown to users when their comment is blocked. The message is fully
translatable and supports your site’s language.
### Will this conflict with other comment plugins like Akismet?
No, Comments Firewall is designed to work alongside other comment protection plugins.
It provides an additional layer of security by blocking obvious spam before it even
reaches other plugins.
### Can I disable specific features?
Yes, all major features can be toggled on/off through the settings page, including
website field removal, HTTP blocking, submission method controls, and the branding
badge.
### Does this support multisite installations?
Yes, the plugin works on WordPress multisite installations. Each site in the network
needs to be configured separately through its own settings page.
### How do I track blocked spam comments?
The plugin includes a dashboard widget that shows real-time statistics of blocked
comments. You can view the total number of blocked attempts directly from your WordPress
dashboard.
### Can I allow legitimate URLs in comments?
Currently, the plugin blocks all HTTP/HTTPS URLs to prevent backlink spam.
### Does this work with REST API and XML-RPC submissions?
Yes! The plugin can control comment submissions from forms, REST API, and XML-RPC.
You can enable or disable protection for each method independently through the settings
page.
### Is the plugin translated into other languages?
Yes, the plugin includes complete translations for English, Spanish (Español), French(
Français), German (Deutsch), and Arabic (العربية) with full RTL support. The plugin
automatically uses your site’s language setting.
### Does this plugin slow down my website?
No, Comments Firewall is designed for zero performance impact. All blocking happens
before comments reach the database, and the code is optimized for speed. There are
no external API calls or heavy operations.
### How do I report bugs or request features?
You can report bugs or request features through the WordPress.org plugin support
forum or via our support email listed in the plugin settings page.
### What’s the “Protected by” badge feature?
You can optionally display a small “Protected by Comments Firewall” (only String,
NO link) badge on your site. This is completely optional and can be customized (
text, display position) or disabled entirely through the settings.
## Reviews
### [Finally, Spam-Free Without Lifting a Finger!](https://wordpress.org/support/topic/finally-spam-free-without-lifting-a-finger/)
[raptiviste](https://profiles.wordpress.org/raptiviste/) 26 Otover 2025
This plugin is an absolute game-changer. After trying countless anti-spam solutions,
Comments Firewall just works. Set it and forget it. It silently blocks spammy comments
without any manual intervention, CAPTCHAs, or annoying questions for my real users.
My comment moderation queue has gone from dozens a day to zero. If you’re tired
of fighting spam, stop what you’re doing and install this now. It’s that good.
[ Read all 1 review ](https://wordpress.org/support/plugin/comments-firewall/reviews/)
## Contributors & Developers
“Comments Firewall” is open source software. The following people have contributed
to this plugin.
Contributors
* [ korchix ](https://profiles.wordpress.org/korchix/)
[Translate “Comments Firewall” into your language.](https://translate.wordpress.org/projects/wp-plugins/comments-firewall)
### Interested in development?
[Browse the code](https://plugins.trac.wordpress.org/browser/comments-firewall/),
check out the [SVN repository](https://plugins.svn.wordpress.org/comments-firewall/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/comments-firewall/)
by [RSS](https://plugins.trac.wordpress.org/log/comments-firewall/?limit=100&mode=stop_on_copy&format=rss).
## Changelog
#### 1.0.2 – 2025-10-18
**Changes:**
* Fixed review link to show all reviews (WordPress.org compliance)
#### 1.0.1 – 2025-10-13
**Bug Fixes:**
* Fixed inline `