WP Manifestindependent plugin directory
manifest / security / mailin-honeypot

Honeypot for Brevo WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

Adds logic which parses a honeypot field, called `come_and_get_it` before submission of Brevo's WordPress plugin submission forms.

★ 3stars
245release downloads
≈10active sites
v1.0.1latest · 2 years ago

Install

Download mailin-honeypot.zip From the v1.0.1 release on GitHub, Apr 19, 2024

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/dan0sz/mailin-honeypot/releases/download/v1.0.1/mailin-honeypot.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

How to use Honeypot for Brevo

  1. Download the the latest release.
  2. Install and activate the plugin.
  3. Add a hidden input field to your Brevo signup form, named come_and_get_it, e.g.
    <input type="hidden" name="come_and_get_it" value="" />
  4. Done!

Most spambots will always attempt to enter values in all fields. If the come_and_get_it field has a value, that means it's a bot and the form won't be submitted.

You can modify the name of the input field yourself, by using the brevo_honeypot_name filter (recommended).

Releases

2 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v1.0.1 latest
Apr 19, 2024 2 years ago
mailin-honeypot.zip
236
Mar 1, 2024 2 years ago
mailin-honeypot.zip
9

Active-site estimate ≈10 comes from the median of recent superseded releases. Method.

A grade

Security

Honeypot for Brevo 1.0.1 · audited by WP Registry

No security issues found.

Audited release
1.0.1
Findings
none
Worst severity
—
Content hash
cec8d1a51b25ff49afb91753…

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.