Is It Disposable

The official WordPress plugin for Is It Disposable. It blocks disposable and temporary email addresses on registration, checkout, comment, and contact forms by checking each address against the service and enforcing the policy configured on your account dashboard: allow, warn, or block.

Coverage comes in three layers: exact server-side enforcement for WordPress core, WooCommerce, and the major form plugins; a universal client-side layer for every other email field, with one-click typo correction; and a one-line isid_check_email() function for custom code. Login and password-reset forms are never checked, and every failure path fails open, so the plugin never breaks a form.

The plugin needs a secret key from isitdisposable.com to connect and stays inert until one is entered. Local logs store email domains only, and a stricter privacy mode sends only the domain to the service as well. The full description, the external services disclosure, and the FAQ live in readme.txt, the WordPress.org listing copy.

This plugin is under active development and will be published to the WordPress.org plugin directory when it's ready.

Development

Working on the plugin requires Composer, Node, and Docker.

Install the PHP tooling and check the code:

composer install
composer lint
composer analyze
composer test:unit

Install the JavaScript tooling and start a local WordPress site for the plugin:

npm install
npm run env:start

Once the local site is running, the full test suite (including the tests that need a real WordPress install) runs with:

npm run test:php

The translation template in languages/ regenerates with:

npm run make-pot

License

GPLv2 or later. The full license text is available at gnu.org/licenses/gpl-2.0.html.