This documentation will guide you through the スパム保護 settings available inside PopupKit’s Form block. By enabling these settings, you can block automated bot submissions before they reach your integrations or subscriber list, keeping your lead data clean and reliable.

How to Enable Spam Protection in PopupKit #

The Spam Protection feature is built directly into PopupKit’s Form block. It is available whether you build a popup from scratch or use a premade template that already contains a form.

Step 1: Open the Form Block Settings #

To access the Spam Protection settings, you first need to be inside the PopupKit campaign editor.

• あなたの WordPress ダッシュボード, go to PopupKit > Campaigns.
• クリック 編集 on the campaign you want to configure. You can also create a new campaign and add a Form block to it.

• Inside the editor, click on the Form block within your popup design.
• The right-hand panel will switch to the ブロック tab, showing the Form block settings.
• Make sure you are on the コンテンツ tab within the block settings panel.

が表示されます。 スパム保護 section listed under the Content tab. Click on it to expand.

Step 2: Enable Spam Protection #

• Toggle on the Enable Spam Protection switch.

Once enabled, PopupKit runs all spam checks on the server, not just in the browser. This means bots that bypass the frontend and post directly to the API are blocked at the server level as well.

注記： Every spam check runs server-side. Automated submissions are blocked before they are stored in your subscriber list or sent to any connected integration.

Step 3: Configure the Honeypot Field #

The Honeypot Field is a hidden input that real visitors never see. When a bot fills it in automatically, PopupKit identifies the submission as spam and discards it.

• Toggle on the Honeypot Field switch to enable it.

Honeypot Field Name

This is the internal name of the hidden field. The default value is pbb_hp.

Important: Change this to a unique name for your site. If bots learn a common field name, they can be programmed to leave it empty. Avoid using names that browsers autofill, such as url or website.

Honeypot Label

This is the visible label of the honeypot field as it would appear if someone inspected the page source. The default value is Leave this field empty.

Real visitors will never see or interact with this field. It is hidden from view by CSS. Only automated bots filling in all form fields will trigger it.

Step 4: Set Minimum Submission Time #

Bots typically fill out and submit forms within milliseconds. The Minimum Submission Time setting adds a time-based check. Submissions that arrive faster than a set number of seconds are automatically treated as spam.

• Toggle on the Minimum Submission Time switch.
• の中に Minimum Time Before Submit (Seconds) field, enter a value. The default is 3 seconds.

ヒント： A value of 3 seconds is a reasonable default for most use cases. Real human visitors take at least a few seconds to read and fill in a form, so this threshold rarely causes any friction for genuine users.

Step 5: Configure Spam Detection Behavior #

When a submission is flagged as spam, PopupKit needs to know what to do with it. Use the If Spam Is Detected dropdown to choose the behavior.

The available options are:

Discard Silently (Default): The submission is permanently discarded. The visitor sees the normal success message, which gives bots no feedback to tune their behavior against. This is the recommended setting for most sites.

Discard & Show Error: The submission is discarded and an error message is displayed to the submitter. This is more transparent but can give bots information to work with.

Discard & Redirect: The submission is discarded and the visitor is redirected to a URL of your choice. Use this if you want to send suspected bots to a specific page rather than showing any response on the current popup.

Step 6: Set Maximum Links and Blocked Keywords #

These two additional settings give you further control over the type of content that can be submitted through your forms.

Maximum Links Allowed

This setting blocks submissions that contain more URLs than the number you specify.

• The default value is 0, which allows any number of links.
• 設定する 1 または 2 if you want to block submissions that contain multiple URLs, a common pattern in spam messages.

Blocked Keywords

Enter words or phrases that should automatically flag a submission as spam. You can add one keyword per line or separate multiple keywords with commas.

Use this to block submissions containing known spam terms, competitor brand names, or any other patterns you want to filter out.

Also Use WordPress Disallowed Keys

• Toggle on Also Use WordPress Disallowed Keys to automatically apply the keyword blocklist from your WordPress settings.

This setting pulls from Settings > Discussion > Disallowed Comment Keys in your WordPress dashboard. If you already maintain a disallowed word list for blog comments, enabling this toggle applies the same list to your popup forms without any duplication of effort.

Once all your Spam Protection settings are configured, click 保存 in the top-right corner of the editor. Your popup form will now filter out bot submissions using the rules you have set. And, it helps to keep your subscriber list clean and your integrations free from junk data.