WP Manifestindependent plugin directory
manifest / security / dahu-security-connect

Dahu Sécurité Connect

Protection anti-spam pour le formulaire d'inscription WooCommerce (honeypot, filtrage par pseudo, filtrage par adresse e-mail, filtrage optionnel des alias Gmail) avec journalisation des tentatives bloquées.

by Hugo Vial-Jaime · github.com/epilouptique/dahu-security-connect · website

★ 0stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/epilouptique/dahu-security-connect/archive/refs/heads/main.zip
Readme github.com/epilouptique/dahu-security-connect ↗

Anti-spam protection for the WooCommerce registration form. Blocks automated bot sign-ups with a honeypot field, blocklists on username/email patterns, optional Gmail "+alias" filtering, and a log of blocked attempts.

Description

Dahu Security Connect targets bot-driven registration spam on WooCommerce stores — mass account creation through the front-end sign-up form, as opposed to brute-force login attacks (which are out of scope for this plugin). It hooks into woocommerce_registration_errors to validate every registration attempt against a set of configurable rules, and keeps a log of what was blocked and why.

The plugin works out of the box on any WooCommerce store; nothing is hardcoded to a specific site.

Features

  • Honeypot field — an invisible hidden field added to the registration form. Any bot that fills it in gets rejected. Enabled by default.
  • Username pattern blocking — reject registrations whose username contains any of a configurable list of substrings (case-insensitive).
  • Email pattern blocking — same mechanism applied to the email address (e.g. block an entire TLD or a known spam domain).
  • Gmail "+alias" blocking (optional) — reject addresses of the form name+tag@gmail.com, useful against multi-account abuse from a single mailbox.
  • Attempt log — every blocked registration is recorded with date, reason, username, email, and IP address (up to 200 entries, FIFO).
  • Settings page under Settings which lets you toggle each mechanism and edit the pattern lists without touching code.

Installation

  1. Upload the plugin folder to /wp-content/plugins/ (or install the zip via the WordPress admin).
  2. Activate the plugin through the "Plugins" menu in WordPress.
  3. Requires WooCommerce to be installed and active.

Configuration

Go to Settings > Dahu Sécurité Connect to:

  • Enable/disable the honeypot field
  • Enable/disable Gmail "+alias" blocking
  • Edit the list of blocked username patterns (one per line)
  • Edit the list of blocked email patterns (one per line)
  • Review or clear the log of blocked registration attempts

Changelog

1.1.0

  • Added logging of blocked registration attempts
  • Added email pattern blocking
  • Added Gmail "+alias" blocking option

1.0.0

  • Initial release: honeypot field and username pattern blocking

License

GPL v2 or later. See LICENSE for the full text.