PHPackages                             cloudgrayau/oopspam - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. cloudgrayau/oopspam

ActiveCraft-plugin[Security](/categories/security)

cloudgrayau/oopspam
===================

OOPSpam Anti-Spam for Craft CMS

1.5.5(3mo ago)02.0k↓15.4%2MITPHPPHP ^8.0|^8.2

Since Oct 29Pushed 3mo ago1 watchersCompare

[ Source](https://github.com/cloudgrayau/oopspam)[ Packagist](https://packagist.org/packages/cloudgrayau/oopspam)[ RSS](/packages/cloudgrayau-oopspam/feed)WikiDiscussions craft4 Synced 1mo ago

READMEChangelog (10)Dependencies (3)Versions (21)Used By (0)

OOPSpam Anti-Spam for Craft CMS
===============================

[](#oopspam-anti-spam-for-craft-cms)

A privacy friendly anti-spam utility to safeguard your website and customers.

[![Screenshot](resources/craftoopspam.jpg)](resources/craftoopspam.jpg)

Requirements
------------

[](#requirements)

This plugin requires Craft CMS 4.0.0 or later.

Installation
------------

[](#installation)

`composer require cloudgrayau/oopspam`

OOPSpam Overview
----------------

[](#oopspam-overview)

OOPSpam is a privacy friendly anti-spam utility for protecting forms, user registrations, commerce and comments in Craft CMS.

OOPSpam is a modern spam filter that uses machine learning to analyse messages, checking each submission against an extensive database of over 500 million IPs and emails to effectively detect and block spam. The OOPSpam API protects over 3.5 million websites daily.

A valid API key from the [OOPSpam Service](https://oopspam.com/?ref=cloudgray) is required to use this plugin.

Protection
----------

[](#protection)

The OOPSpam plugin protects the following services from spam and includes optional logging and reporting in the Craft CMS dashboard. The plugin supports both standard protection and contextual detection.

The OOPSpam plugin also comes with optional rate limiting, which can be enabled to reduce excessive spam requests.

### User Registration Protection

[](#user-registration-protection)

Protects user registrations from spam.

### Commerce Protection

[](#commerce-protection)

Protects orders and subscriptions from spam.

### Form Protection

[](#form-protection)

Protects form submissions from spam. The current form integrations are protected:

**✓ Formie** (&gt;= 2.0.0) -
**✓ Freeform** (&gt;= 5.0.0) -
**✓ Contact Form** (&gt;= 3.0.0) -
**✓ Wheel Form** (&gt;= 4.0.2) -
**✓ Express Forms** (&gt;= 2.0.0; no longer maintained) -
**✓ Custom Forms** - requires custom programming

### Comment Protection

[](#comment-protection)

Protects comment submissions from spam. The current comment integrations are protected:

**✓ Comments** (&gt;= 2.0.0) -
**✓ Custom Comments** - requires custom programming

Custom Protection
-----------------

[](#custom-protection)

Any form or comment logic can be protected by OOPSpam via a custom plugin/module controller.

The `email` and `content` params are required. The `checkForLength` parameter is optional and can be set to override the configuration value.

```

```

If you would rather use **contextual detection**, the `content` and `contextual` params are required. The `email` param is optional and is used for checking against any manual rules. The `context` and `checkForLength` parameters are also optional and can be set to override the configuration value.

```

```

Overriding Settings
-------------------

[](#overriding-settings)

You can now override settings on a per-form basis for the `Formie`, `FreeForm`, `Express Forms` and `WheelForm` integrations. This can only be done via config file.

Each override will need to use the form handle as the array key. As `WheelForm` doesn't support handles, the form ID should be used instead.

```
'forms' => [
  'contact' => [ /* Form handle */
    'disabled' => false, /* Optional setting to disable spam check for specific form */
    'spamScore' => 3,
    // extra settings
  ]
]

```

Domain Reputation
-----------------

[](#domain-reputation)

The OOPSpam plugin comes with a domain reputation checker. Simply, this tool evaluates the reputation of a given domain name by cross-referencing it against multiple authoritative sources, including Google, Microsoft, Mozilla, and various other reputable security providers. An active API key is required for this and each request counts towards your monthly tally.

Note: The list of providers may be updated periodically to ensure comprehensive coverage.

Test Suite
----------

[](#test-suite)

The OOPSpam plugin also includes a testing suite, where you can test the results of API calls for both general requests and contextual requests. An active API key is required for this and each request counts towards your monthly tally.

Brought to you by [Cloud Gray Pty Ltd](https://cloudgray.com.au/)

###  Health Score

47

—

FairBetter than 94% of packages

Maintenance82

Actively maintained with recent releases

Popularity23

Limited adoption so far

Community11

Small or concentrated contributor base

Maturity60

Established project with proven stability

 Bus Factor1

Top contributor holds 96.5% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~25 days

Recently: every ~18 days

Total

20

Last Release

91d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/ac0122f7a7aab3787d35057daeb1ca626f9d27611e17af984b41fb0e288bd117?d=identicon)[cloudgrayau](/maintainers/cloudgrayau)

---

Top Contributors

[![cloudgrayau](https://avatars.githubusercontent.com/u/43738347?v=4)](https://github.com/cloudgrayau "cloudgrayau (82 commits)")[![boboldehampsink](https://avatars.githubusercontent.com/u/378974?v=4)](https://github.com/boboldehampsink "boboldehampsink (3 commits)")

---

Tags

securitycmsCraftcraftcmscraft-pluginanti-spamoopspam

### Embed Badge

![Health badge](/badges/cloudgrayau-oopspam/health.svg)

```
[![Health](https://phpackages.com/badges/cloudgrayau-oopspam/health.svg)](https://phpackages.com/packages/cloudgrayau-oopspam)
```

###  Alternatives

[craftpulse/craft-password-policy

Password Policy plugin

2826.0k1](/packages/craftpulse-craft-password-policy)[verbb/image-resizer

Resize assets when they are uploaded.

127269.1k7](/packages/verbb-image-resizer)[acclaro/translations

Easily launch and manage multilingual Craft websites without having to copy/paste content or manually track updates.

1229.5k](/packages/acclaro-translations)[enupal/backup

Fully integrated Backup solution for Craft CMS

1612.5k1](/packages/enupal-backup)[born05/craft-csp

Content Security Policy (or CSP) generator using nonces.

1110.2k](/packages/born05-craft-csp)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
