PHPackages                             badbehaviour/badbehaviour - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. badbehaviour/badbehaviour

ActiveLibrary[Security](/categories/security)

badbehaviour/badbehaviour
=========================

Bad Behaviour is a spam protection system that detects and blocks unwanted Web accesses.

2.2.26(1y ago)781[1 issues](https://github.com/Bad-Behaviour/badbehaviour/issues)LGPL-3.0-onlyPHPPHP 8.0 - 8.4

Since Oct 15Pushed 1mo ago1 watchersCompare

[ Source](https://github.com/Bad-Behaviour/badbehaviour)[ Packagist](https://packagist.org/packages/badbehaviour/badbehaviour)[ Docs](https://github.com/Bad-Behaviour/badbehaviour)[ RSS](/packages/badbehaviour-badbehaviour/feed)WikiDiscussions master Synced 1mo ago

READMEChangelog (2)DependenciesVersions (3)Used By (0)

Bad Behaviour
=============

[](#bad-behaviour)

Bad Behaviour prevents spammers from ever delivering their junk, and in many cases, from ever reading your site in the first place.

Description
-----------

[](#description)

Welcome to a whole new way of keeping your blog, forum, guestbook, wiki or content management system free of link spam. Bad Behaviour is a PHP-based solution for blocking link spam and the robots which deliver it.

Thousands of sites large and small, trust Bad Behaviour to help reduce incoming link spam and malicious activity.

Bad Behaviour complements other link spam solutions by acting as a gatekeeper, preventing spammers from ever delivering their junk, and in many cases, from ever reading your site in the first place. This keeps your site's load down, makes your site logs cleaner, and can help prevent denial of service conditions caused by spammers.

Bad Behaviour also transcends other link spam solutions by working in a completely different, unique way. Instead of merely looking at the content of potential spam, Bad Behaviour analyzes the delivery method as well as the software the spammer is using. In this way, Bad Behaviour can stop spam attacks even when nobody has ever seen the particular spam before.

Bad Behaviour is designed to work alongside existing spam prevention services to increase their effectiveness and efficiency. Whenever possible, you should run it in combination with a more traditional spam prevention service.

Bad Behaviour works on, or can be adapted to, virtually any PHP-based Web software package. Bad Behaviour is available for many packages.

Installing and configuring Bad Behaviour on most platforms is simple and takes only a few minutes. In most cases, no configuration at all is needed. Simply turn it on and stop worrying about spam!

The core of Bad Behaviour is free software released under the GNU Lesser General Public License, version 3, or at your option, any later version.

Installation
------------

[](#installation)

Bad Behaviour has been designed to install on each host software in the manner most appropriate to each platform. It's usually sufficient to follow the generic instructions for installing any plugin or extension for your host software.

On MediaWiki, it is necessary to add a second line to LocalSettings.php when installing the extension. Your LocalSettings.php should include the following:

` include\_once( 'includes/DatabaseFunctions.php' ); include( './extensions/Bad-Behaviour/bad-behaviour-mediawiki.php' );

For complete documentation and installation instructions, please visit [User Guide](https://github.com/Bad-Behaviour/badbehaviour/wiki)

Screenshots
-----------

[](#screenshots)

1. Most of the time, only spammers see this. In the rare event a human winds up here, a way out is provided. This may involve removing malicious software from the user's computer, changing firewall settings or other simple fixes which will immediately grant access again.
2. Bad Behaviour's built in log viewer (WordPress) shows why requests were blocked and allows you to click on any IP address, user-agent string or block reason to filter results.

Release Notes
-------------

[](#release-notes)

### Bad Behaviour 2.2 Known Issues

[](#bad-behaviour-22-known-issues)

- Bad Behaviour 2.2 requires MySQL 5.7 or later and PHP 8.0 or later.
- CloudFlare users must enable the Reverse Proxy option in Bad Behaviour's settings. See the documentation for further details.
- Bad Behaviour is unable to protect internally cached pages on MediaWiki. Only form submissions will be protected.
- On WordPress when using WP-Super Cache, Bad Behaviour must be enabled in WP-Super Cache's configuration in order to protect PHP Cached or Legacy Cached pages. Bad Behaviour cannot protect mod\_rewrite cached (Super Cached) pages.

###  Health Score

41

—

FairBetter than 89% of packages

Maintenance66

Regular maintenance activity

Popularity11

Limited adoption so far

Community8

Small or concentrated contributor base

Maturity65

Established project with proven stability

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~822 days

Total

2

Last Release

488d ago

PHP version history (2 changes)2.2.25PHP 8.0 - 8.1

2.2.26PHP 8.0 - 8.4

### Community

Maintainers

![](https://www.gravatar.com/avatar/b2fbbe24255a1c016af2db08e2d73b288d83a8b9592b2af230a671193e06f694?d=identicon)[vendeeglobe](/maintainers/vendeeglobe)

---

Top Contributors

[![vendeeglobe](https://avatars.githubusercontent.com/u/54716082?v=4)](https://github.com/vendeeglobe "vendeeglobe (14 commits)")

---

Tags

botsphpspamspamcommentantispamrobotreferrertrackback

### Embed Badge

![Health badge](/badges/badbehaviour-badbehaviour/health.svg)

```
[![Health](https://phpackages.com/badges/badbehaviour-badbehaviour/health.svg)](https://phpackages.com/packages/badbehaviour-badbehaviour)
```

###  Alternatives

[gregwar/captcha

Captcha generator

1.8k9.6M138](/packages/gregwar-captcha)[gregwar/captcha-bundle

Captcha bundle

3524.7M32](/packages/gregwar-captcha-bundle)[msurguy/honeypot

Honeypot spam prevention

4381.2M12](/packages/msurguy-honeypot)[fabianwennink/iconcaptcha

IconCaptcha is a self-hosted, customizable, easy-to-implement and user-friendly captcha.

17740.5k1](/packages/fabianwennink-iconcaptcha)[usarise/turnstile

PHP library for Turnstile, is Cloudflare’s smart CAPTCHA alternative. It can be embedded into any website without sending traffic through Cloudflare and works without showing visitors a CAPTCHA.

2393.5k6](/packages/usarise-turnstile)[s1syphos/php-simple-captcha

Simple captcha generator

2737.8k6](/packages/s1syphos-php-simple-captcha)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
