A truly silent and no-nonsense comment spam filter for WordPress. Intercepts spam before it ever touches your database — no moderation queue, no spam folder, no cleanup. Spam is gone for good — all settings stored cleanly in a single database option.
This plugin is especially useful if you run a busy site, are fed up with Akismet sending your data to the cloud, or simply want spam dealt with quietly and locally — no account, no API key, no drama.
-
- Opt-in notice — you confirm before anything gets armed
-
- Arm / Disarm control with live status indicator
-
- Settings — all spam detection options in one clean view
-
- The 9 Dollar Comment Spam Mute
About The Plugin
The 9 Dollar Comment Spam Mute is designed for WordPress users who need a straightforward, reliable way to kill comment spam — without bloat, external dependencies or cloud services. Unlike bloated anti-spam plugins, this plugin keeps everything local, lean and completely under your control.
The plugin hooks into WordPress at the earliest possible moment and silently discards spam before it ever reaches your database. No moderation queue. No spam folder. No cleanup. With Silent Mode enabled, bots get a fake success response and never realize they've been blocked — so they won't adapt their tactics.
For power users, the PRO version unlocks four advanced features: a self-learning IP blocklist that automatically flags repeat offenders, custom regex patterns for building your own spam rules, a smart Naive Bayes classifier that trains itself on your site's actual spam patterns, and a WooCommerce verified buyer whitelist that automatically trusts your paying customers. Priority support via ticket system is also included.
All settings are stored in a single WordPress option in the database — clean, lean and fully portable. No separate database tables, no file writes, no external service calls. You can optionally configure the plugin to delete all data on uninstall, leaving absolutely no trace behind.
The responsive admin interface gives you full control over every detection setting, a live discarded comments log with date, IP, author and reason, and an Arm/Disarm toggle that lets you pause protection instantly without losing your configuration.
The LITE version is free forever and covers the essentials. The PRO version is available for a small annual fee and adds the power features. No bloat, no unnecessary complexity — just a clean, silent spam filter that does exactly what it says. Perfect for bloggers, agencies, and anyone who's had enough of spam cluttering their database.
Key Features
Zero-Touch Protection
Spam gets intercepted before it ever reaches your database — no moderation queue, no spam folder, no cleanup. Set it up once, arm it, and forget it exists.
Silent Mode
Bots get a fake success response and never realize they've been blocked — so they won't switch tactics. Spam is discarded without tipping anyone off.
Honeypot Trap
An invisible field silently catches automated bots. Real users never see it — bots can't resist it. No configuration needed, works out of the box.
Speed Check
Discards submissions faster than any human could type. If a comment arrives in under a few seconds, it's a bot — and it's gone before your database even knows it existed.
Link Limit
Comments packed with links are a classic spam signal. Set your own threshold and anything above it gets discarded automatically — no human review needed.
Keyword Blacklist
A fully customisable, case-insensitive keyword list. One word per line. Comes pre-loaded with the most common spam terms — tweak it to fit your audience.
Rate Limiting
Any IP submitting too many comments in a short window gets automatically blocked for the rest of that hour. Stops the most common bot patterns without touching real users.
Discarded Comments Log
A clean log of the last 50 discarded comments — date, IP, author and the reason it was blocked. Auto-pruned after 90 days, clearable manually anytime.
Whitelist
Email addresses, IP ranges and user agents you trust are never blocked. Add them once and they're always waved through — no matter what the spam checks say.
Daily Report Email
Optional morning summary of everything that got discarded overnight. Straight to your inbox, no login required — just a quick "all good" to start your day.
Smart Learning Filter PRO
A self-learning Naive Bayes classifier that trains itself on your site's actual spam patterns. Gets smarter with every discarded comment — false positives correctable directly in the log.
Self-learning IP Blocklist PRO
Repeat offenders get flagged automatically and permanently blocked on every future attempt. Add IPs manually or let the plugin build the list for you.
Custom Regex Patterns PRO
Build your own advanced spam rules with full regex support. One pattern per line, validated before saving. When in doubt, test on regex101.com first.
Priority Support PRO
PRO users get direct access to our ticket system for fast, personal support. Skip the forum queue and get your issues resolved quickly by our team.
LITE vs. PRO Comparison
| Feature | LITE | PRO |
|---|---|---|
| Honeypot trap | ✓ | ✓ |
| Speed check | ✓ | ✓ |
| Link limit | ✓ | ✓ |
| Keyword blacklist | ✓ | ✓ |
| Silent Mode | ✓ | ✓ |
| Rate limiting | ✓ | ✓ |
| Whitelist (email / IP / user agent) | ✓ | ✓ |
| Discarded comments log | ✓ | ✓ |
| Daily report email | ✓ | ✓ |
| Arm / Disarm control | ✓ | ✓ |
| Optional data deletion on uninstall | ✓ | ✓ |
| Self-learning IP blocklist | ✗ | ✓ |
| Custom regex patterns | ✗ | ✓ |
| Smart learning spam filter (Bayes) | ✗ | ✓ |
| WooCommerce verified buyer whitelist | ✗ | ✓ |
| Configurable log size | ✗ | ✓ |
| CSV log export | ✗ | ✓ |
| Statistics dashboard widget | ✗ | ✓ |
| No advertisements | ✗ | ✓ |
| Priority support via ticket system | ✗ | ✓ |
Use Cases
The WordPress Site Owner Drowning in Spam
You run a blog, a portfolio or a small business site. Comments are open because you actually want the conversation — but instead you're getting hit with wave after wave of casino links, SEO spam and gibberish. You've tried Akismet but you're not thrilled about your comment data going to a cloud you don't control. This plugin is the answer if you want spam dealt with locally, silently and permanently — without an account, an API key or a monthly subscription. Install it, arm it, and stop thinking about spam forever.
The Agency Managing WordPress Sites for Clients
You maintain a fleet of WordPress sites. Spam moderation is the last thing you want landing in your clients' laps — or yours. This plugin runs silently on every site, discards spam before it touches the database, and sends an optional daily report email so you can keep an eye on things without logging in. No queue to moderate, no folder to clean, no client panicking about 200 pending comments. Set it up during onboarding and never touch it again.
The WooCommerce Store Owner Who Wants Clean Reviews
"I just want real reviews from real customers — not spam bots pretending to buy my products."
Sarah runs a mid-sized WooCommerce store. Product reviews are open and important to her business, but bots don't care about that. With the PRO version's WooCommerce Verified Buyer Whitelist, her actual customers sail through every spam check automatically — while everything else gets put through the full filter. No false positives on real buyers, no spam from bots. Exactly the way it should work.
readme.txt
=== The 9 Dollar Comment Spam Mute ===
Contributors: the9dollarplugins
Donate link: https://buymeacoffee.com/t.9.p
Tags: comment spam, anti-spam, spam protection, spam comments, spam filter
Requires at least: 6.0
Tested up to: 6.9
Requires PHP: 7.4
Stable tag: 1.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html
Auto-discard comment spam before it ever hits your database. Zero-Touch protection — no API keys, no external calls,
== Description ==
**The 9 Dollar Comment Spam Mute** is your silent, Zero-Touch spam-fighting sidekick. It catches spam comments before they even think about touching your database. No moderation queue. No spam folder. No admin drama.
Set it up once. Let it work. Never think about spam again.
**Why you’ll like it**
Most anti-spam plugins ship your comment data off to who-knows-where, demand an API key, or just shuffle spam into a folder that slowly turns into a digital landfill. This one does things differently: everything runs on your own server, zero external requests, and spam comments are gone before they ever arrive.
No spam folder to clean. No pending queue. No cloud. No key. No fuss.
**How it kicks spam to the curb**
The plugin hooks into WordPress at the earliest possible moment — right before a comment would be saved. If something looks like spam, it’s silently discarded. You get to choose what happens next: with Silent Mode on, bots see a fake success message and never realize they’ve been blocked (so they won’t change tactics). With Silent Mode off, the comment is rejected with a normal error message. Either way: zero database clutter.
**Heads-up (important!)**
Discarded spam comments are gone for good. That’s why there’s a mandatory opt-in step — so you’re fully aware before spam protection goes live. You keep full control over all detection settings, and comments only get discarded once you explicitly arm the plugin.
**Why this plugin exists**
Most anti-spam plugins:
- send your data to external APIs
- require API keys and accounts
- store spam in folders nobody cleans
This plugin does none of that. Everything runs locally on your server. No external calls. No cloud dependency. No unnecessary complexity.
Spam is not stored. It’s gone.
**Features (LITE — free)**
- **No external API calls** — fully GDPR-compliant by design
- **No API key, no account, zero setup fuss** — just install, configure once, arm it, and you're done
- **No external API calls** — all spam detection runs locally on your server
- **GDPR-compliant by design** — no data leaves your site; IP addresses stored for spam detection only, auto-deleted after 90 days
- **Universal coverage** — protects comments on posts, pages, custom post types, WooCommerce product reviews, and all native WordPress comment types
- **Comments get intercepted and discarded before they ever hit the database** — no spam folder to clean, ever
- **Silent Mode** — bots get a fake success message and never realize they’ve been blocked (keeps them from adapting)
- **Set once, runs automatically** — after you arm it, you’re done
- **Works with all native WordPress comment types** — posts, pages, custom post types, attachments, WooCommerce reviews
- **Mandatory opt-in** — you’re always in control
- **Arm / Disarm control** — activate or pause spam protection instantly without losing settings
- **Rate limiting** — automatically blocks IPs that submit comments too frequently
- **Discarded comments log** — last 50 entries with date, IP, author and reason, auto-pruned after 90 days
- **Sleek & slim** — one PHP file, one CSS file, one JS file. No classes, no autoloader, no framework baggage
- **Honeypot trap** — invisible field silently catches automated spam bots
- **Speed check** — discards submissions faster than any human could type
- **Time token validation** — rejects replayed or forged submission tokens older than one hour
- **Link limit** — discards comments containing too many links, a classic spam signal
- **Keyword blacklist** — case-insensitive spam keyword list, fully customisable, one word per line
- **Whitelist: Email / IP / User-Agent** — never block your trusted commenters
- **Daily report email** — optional morning summary of discarded spam, sent straight to your inbox
**PRO version extras**
Upgrade to PRO and level up your spam defense:
- **Self-learning IP Blocklist** — automatically flags repeat offenders (PRO only)
- **Custom Regex Patterns** — build your own advanced spam rules (PRO only)
- **Smart Learning Spam Filter** — trains itself on your site’s own comment history (PRO only)
- **Adjustable log size** — keep as many or as few entries as you like (PRO only)
- **CSV log export** — download your discarded comments log anytime (PRO only)
- **WooCommerce Verified Buyer Whitelist** — verified customers get a free pass (PRO only)
- **Statistics Dashboard Widget** — see your spam stats at a glance (PRO only)
- **Priority support** — fast help when you need it (PRO only)
**How it all works**
1. Install and activate the plugin.
2. Go to **Spam Mute** in your WordPress admin sidebar.
3. Read the opt-in notice and confirm you’re cool with the fact that spam comments will be permanently discarded.
4. Tweak your detection settings — honeypot, speed check, link limit, keyword blacklist.
5. Set Spam Protection to **Active** and let the silence begin.
That’s it. The 9 Dollar Comment Spam Mute works in the background, quietly doing its thing. Zero-Touch.
== Important notice ==
Spam comments are permanently deleted.
There is no recovery, no trash, no undo.
A mandatory opt-in ensures you understand this before activation. Nothing happens unless you explicitly enable it.
== Screenshots ==
1. Opt-in notice — you confirm before anything gets armed.
2. Arm / Disarm control with live status indicator.
3. Settings — all spam detection options in one clean view.
4. Discarded comments log — last 50 entries with date, IP, author, and reason.
== Installation ==
1. Upload the plugin folder to `/wp-content/plugins/` or install directly from the WordPress Plugins screen.
2. Activate it.
3. Head to **Spam Mute** in your WordPress admin sidebar.
4. Confirm the opt-in, tweak your settings, then arm the plugin.
== Frequently Asked Questions ==
= Will discarded spam comments end up in trash or spam? =
Nope. Once The 9 Dollar Comment Spam Mute discards a comment, it’s gone for good — no trash, no spam folder, no second chances.
= What’s the deal with Silent Mode? =
Silent Mode (recommended) = spam comments are discarded and bots see a fake success message. They never figure out they’ve been blocked, so they won’t switch up their attack patterns. Silent Mode off = spam comments are rejected with a normal error message. Either way, your database stays clean.
= Can real comments ever get caught by accident? =
It’s possible — no spam filter is 100% perfect. That’s why the opt-in step makes this crystal clear. The keyword blacklist and link limit are the usual suspects if false positives happen. Tune them to fit your audience.
= Does it work with WooCommerce product reviews? =
You bet. WooCommerce reviews use the same WordPress comment hook, so all LITE features cover them automatically. No extra setup.
= Does this thing call home (external APIs)? =
Never. Every spam check runs locally on your server. No data leaves your site.
= Is this GDPR/DSGVO friendly? =
Absolutely. No data ever leaves your server. The discarded comments log stores only IP, author name, email, and a short content preview — all inside your own database. IPs are kept for spam detection and security analysis (legitimate interest under GDPR Art. 6(1)(f)), never shared, never shown publicly. Log entries auto-delete after 90 days, and you can clear them manually anytime.
= How is this different from Akismet? =
Akismet sends every comment to an external cloud for analysis and needs an API key. The 9 Dollar Comment Spam Mute runs entirely on your own server, requires no account or key, and discards spam before it reaches your database — instead of dumping it into a spam folder that just fills up.
= What's the difference between Armed and Disarmed? =
Disarmed = the plugin is installed and configured, but no comments are discarded. Armed = protection is active, and spam comments are silently discarded on submission — they never reach the database.
= Can I pause spam protection without losing my settings? =
Yep. Just set Spam Protection to "Inactive" anytime. All your settings stick, and you can re-arm in one click.
= Does the plugin protect against repeated spam attempts from the same IP? =
Yes. The LITE version includes automatic rate limiting — any IP that submits more than 5 comments within an hour is automatically blocked for the remainder of that hour. This stops the most common bot patterns without affecting legitimate users.
= What happens when I uninstall the plugin? =
By default, all plugin data stays in your database. If you check "Delete data on uninstall" in settings, everything (settings + log) gets permanently removed when you uninstall.
= Do I need an API key or an account? =
Nope. The LITE version is completely free — no registration, no key, no account. Just install and go.
== Changelog ==
= 1.0 - 2026-03-24 =
* Initial release.
* Honeypot trap, speed check, link limit, and keyword blacklist spam detection.
* Silent Mode — bots get a fake success response and never realize they’re blocked.
* Discarded comments log — last 50 entries, auto-pruned.
* Mandatory opt-in with explicit Arm/Disarm control.
Feature Request, Ideas
Your idea could shape the next update. Share a feature you'd love to see and help decide what we build next
Submit your idea...