CONTACT US → +351 936 138 867 call to a Portuguese mobile network

PRESTASHOP SPAM BLOCKER ADDON

Anti-spam protection for PrestaShop 1.7 and 8 contact forms. Honeypot, rate-limiting and CAPTCHA (own PoW, Turnstile, reCAPTCHA). Hook-only, upgrade-safe.

PrestaShop spam blocker addon

Contact Shield: anti-spam protection for your PrestaShop contact form

Your store's contact form is an open door. Automated bots use it to send spam, phishing attempts and promotional messages that flood your inbox and waste your team's time. Contact Shield closes that door without disrupting the experience of genuine customers, combining multiple independent layers of protection that work together to block the vast majority of automated spam.

Multiple layers of anti-spam protection

This PrestaShop spam-blocking addon relies on complementary mechanisms that act simultaneously:

  • Invisible honeypot — catches bots that fill in hidden fields.
  • Time-based verification — rejects instant submissions and abandoned forms.
  • IP rate limiting — prevents message floods from the same address.
  • Content validation — filters messages with too many links or merchant-defined keywords.

The combination of anti-spam and rate-limiting blocks malicious traffic without creating any friction for users sending a genuine message.

Invisible, GDPR-friendly Proof-of-Work CAPTCHA

On top of these layers, Contact Shield includes its own Proof-of-Work CAPTCHA — completely invisible and free of external dependencies. It resolves in the background while the customer fills in the form — no clicks, no tracking, and GDPR-friendly by design, as no visitor data is sent to third parties.

Alternatively, it also supports Cloudflare Turnstile and Google reCAPTCHA v3, both configurable in one click.

Hook-only architecture compatible with PrestaShop 1.7 and 8

Built on a hook-only architecture, the module does not modify any core files of PrestaShop or your theme. This ensures that platform updates won't break the module and that the module won't break your store. It is fully compatible with PrestaShop 1.7 and 8.

Management dashboard and statistics in the back office

Everything is managed from a clear back-office dashboard that displays statistics for the last 30 days, including the number of accepted and blocked messages along with the corresponding reasons. This lets you monitor protection performance without consulting external logs.

One-click updates, safely

When a new version is available, you are quietly notified with the full changelog and can install it in one click. The process includes SHA-256 integrity validation and an automatic backup that rolls back to the previous version on its own if anything goes wrong — no FTP, no hassle.

Extend your PrestaShop store

This module integrates with other solutions for your online business. If you want to strengthen your digital presence, explore our online store development services and our SEO audit. You can also expand your store's functionality with other modules, such as the GDPR cookie information addon or the AI customer support assistant.

Features

  • CSS-hidden honeypot that catches automated bots
  • Time-based verification that rejects submissions that are too fast or have expired
  • IP rate limiting with a configurable time window
  • Content validation with a maximum URL limit per message
  • Configurable keyword blocklist
  • Built-in invisible Proof-of-Work CAPTCHA with no external dependencies
  • Configurable PoW difficulty via slider (10 to 24 bits)
  • Cloudflare Turnstile integration
  • Google reCAPTCHA v3 integration with adjustable threshold
  • Hook-only architecture with no core overrides (upgrade-safe)
  • Compatible with PrestaShop 1.7.x and 8.x
  • Attempt log (accepted and blocked) with reason, retained for 30 days
  • 30-day statistics dashboard in the back office
  • Update system via dedicated endpoint with automatic version checking
  • 1-click update installation with changelog and prior confirmation
  • SHA-256 validation and domain-pinning on update downloads
  • Automatic backup and rollback in case of update failure
  • Ed25519 signed-key licensing (offline validation)
  • Domain validation with subdomain wildcard support
  • Heartbeat to the licence server with revocation list
  • Configurable grace period when the licence server is unavailable
  • Native theme error messages with no template modifications