Keeps bots and spammers out, the free-standing answer to the marketplace "Antispam" plugin.

GuardWhat it does
CaptchaCloudflare Turnstile or hCaptcha inside the registration form. The provider's script and frame are added to the Content Security Policy automatically.
Disposable emailRefuses throw-away domains: a built-in list plus your own.
StopForumSpamAsks the public database about the email, the name and the IP before the account is created.
Blocked wordsA message containing one is refused outright (fail()).
Watched wordsA message containing one waits for a moderator (the core review queue).
Link limitA message with more links than allowed waits for a moderator.
LogEvery guard writes a line you read at Admin → Plugins → Spam.

Settings

Admin → Plugins → TabRe Antispam → Settings: the captcha kind and keys, the disposable list, the StopForumSpam
switch and its confidence threshold, the two word lists, the link limit and the log switch.

Admin → Plugins → TabRe Antispam → Spam log shows what was blocked, by whom and from which address; the whole log
can be cleared there.

Notes

  • Nothing runs on an ordinary page view. The captcha is checked when someone registers, the word and link rules when a
    message is posted — never in a list, a region or a loop.
  • The captcha and StopForumSpam calls are short HTTPS requests with a 4-second connect / 8-second total timeout; a
    provider that cannot be reached does not lock anybody out (a failed captcha check refuses the registration, which the
    visitor can retry).
  • Word matching is case-insensitive substring matching, so keep the entries specific.
  • The log is pruned after 90 days by a daily job.

Uninstall

Disable turns every guard off. Uninstall also drops the log table.