Form Bot Blocker

by Valerius Karch

Rating: 5.0

Downloads: <100

Protect your Shopware forms from bots and spam. Ensure maximum user-friendliness and remain GDPR compliant. Monitor bot activities in the log at any time.

Monthly €4.99* /month Cancelable monthly

Compatible with:

6.4.12.0 - 6.6.8.2

Includes:

Free trial month

The subscription starts with a free trial month during which it can be canceled at any time.

All updates

During the subscription all released updates are included for free

Support from the Extension Partner

In case you have any questions or problems with your extension you can always ask the Extension Partner for help during the subscription.

Description

Highlights

Alternative protection solutions to CAPTCHA
Rules for CAPTCHA
Blocking IP addresses for forms
Logs for blocked bots and blocked IP addresses
GDPR configurable

Features

Automatic Bot Blocking - Multiple bot detectors detect and block most common bots without using CAPTCHA.
CAPTCHA rules - CAPTCHAs can only be activated automatically after the form has been submitted several times.
IP address blocking - Any IP addresses can be manually blocked for forms.
Selection of forms - You decide which forms should be protected.

About the Extension

Form Bot Blocker is a multifunctional solution to protect forms from bots and spam. This extension increases the security of your store and your customers by fighting spam logins, bot registrations, brute force attacks and email flooding.

CAPTCHA can be quite annoying for humans, but it is effective against bots. Form Bot Blocker makes it possible to reduce the use of CAPTCHA, so that no CAPTCHA is displayed for most users.

Alternative protection measures ensure that your forms remain well protected even without a CAPTCHA. CAPTCHA can be completely deactivated if required.

All bot blocks can be recorded. This allows you to track bot activity in the log at any time.

You can also blacklist IP addresses. This blocks Shopware forms for these IP addresses.

GDPR

You decide for yourself whether you configure the plugin to be GDPR-compliant or not.

GDPR compliant configurations

Form Bot Blocker generally does not communicate with external services. Personal data such as IP addresses are stored encrypted by default. They are regularly deleted by the plugin. Basically, you are observing the GDPR regulations if you do not activate storage of IP addresses in plain text.

Non-GDPR compliant configurations

You can enable storage of IP addresses in plain text. This can help technical staff take action against particularly persistent bots and users with suspicious activity. In general, storing IP addresses in plain text is not GDPR-compliant. Please consult a GDPR specialist on this topic.

Supported storefront forms

Login form
Contact form
Newsletter form
Registration form
Password recovery form

Supported forms in extensions and themes

"CMS extensions for Shopware 6" from Shopware ( SwagCmsExtensions versions: 2.4.0 - 4.5.0 )
"CMS Shopping experiences - CMS" from ACRIS ( AcrisCmsCS versions: 5.10.2 - 5.23.4, 6.4.3 - 6.30.3, 7.0.4 - 7.19.10 )
"ThemeWare® Modern Pro" from TC-Innovations ( TcinnThemeWareModern versions: 1.1.3 - 3.4.1 )
"HORIZON | Pro | Responsive Premium Theme" from Zenit Design ( zenitPlatformHorizon Versionen: 2.13.0 - 4.5.1 )

Supported Shopware CAPTCHAs

Simple CAPTCHA
Google reCAPTCHA v2
Google reCAPTCHA v3

Notice

Essentially, the plugin offers a three-tiered protection:

Level 1 (Plugin Protection Mechanisms)

Most bots and spammers should be automatically detected and blocked by bot detectors.

( You can freely activate all or individual plugin protection mechanisms. )

Level 2 (CAPTCHA Rules)

However, quite sophisticated bots exist that cannot be distinguished by humans. CAPTCHA rules help here, which activate Shopware CAPTCHA after multiple submissions of the form.

( Some spam messages may get through before the form submissions limit is reached. )

Level 3 (IP Address Blocking)

IP address blocking has been integrated into the plugin for the worst bots that can even bypass CAPTCHAs. This allows you to manually block IP addresses for a selected period of time.

( Note that IP addresses on the Internet are often assigned dynamically. )

To note

Not original newsletter forms

Some shops do not use the original newsletter form, which is often located in the footer of the shop and only requires an email entry. These newsletter forms often use the same interface as the Shopware newsletter form. Please check whether these are working properly. If this is not the case, deactivate Newsletter in the Form Bot Blocker.

Details

Available: English, German
Latest update: 12 November 2024
Publication date: 2 December 2023
Version: 2.1.1
Category: Special features

Resources

Reviews (5)

Average rating

5.0

Based on 5 reviews

5.0 Functionality

5.0 Usability

5.0 Documentation

5.0 Support

Write a review

If you downloaded this extension you can write a review in the Shopware Account.

Write a review

Sort by

Funktioniert einwandfrei

5.0

by Marco Müller

19 February 2024 09:07

Funktion ist super, Support sehr schnell. Unschlagbar.

5.0 Functionality

5.0 Usability

5.0 Documentation

5.0 Support

Super Tool gegen Spam im Shop. Hat uns sehr geholfen. Der Support ist top und richtig schnell.

5.0

by Sebastian

15 February 2024 11:26

5.0 Functionality

5.0 Usability

5.0 Documentation

5.0 Support

Top - so etwas müsste schon im Standardshop vorhanden sein

5.0

by Torsten Spindler

14 March 2024 15:23

Aufgrund der vielen Hackerangriffe ist das ein Must Have Plugin. Einfach in der Anwendung, nur in der Auflistung, würde ich die Spalte "IP Identifikator" nach hinten verlegen, damit man einen besseren Überblick hat und nicht erst horizontal scrollen muss.

5.0 Functionality

5.0 Usability

5.0 Documentation

5.0 Support

Hervorragendes Plugin, Hervorragender Support

5.0

by Albert Brüggemann

11 September 2024 10:32

Unser Custom Theme hat nicht auf anhieb reibungslos mit dem Plugin funktioniert. Die Kompatibilität wurde umgehend hergestellt. Sehr gut ist die Funktion, dass man das gewählte Shopware Captcha erst nach X Fehlversuchen anzeigen lässt.

Besten Dank!

5.0 Functionality

5.0 Usability

5.0 Documentation

5.0 Support

good and muist have for self hosted sw6 shops

5.0

by mark

19 March 2024 09:27

sw6 standard has an anti spam function buuild in that you can activate but that automatically activates it on all forms and in the checkout. having it in the checkout is not positive for conversion optimisation. so the standard sw6 option is not a good solution against spam.

this plugin allows you to set yourself where you want it active. so you can apply it to contactform, newsletter, registration.

i did not find any other plugin for sw6 so this was our only option and i am happy it is out there.

i use themeware and that now also works with this plugin.

recommended

5.0 Functionality

5.0 Usability

5.0 Documentation

5.0 Support

About the Extension Partner

Valerius Karch

See all extensions

Partner Status

Shopware
Extension Partner

Details

Ø-Rating: 5

Average rating of 5 out of 5 stars
Partner since: 2023
Extensions: 1

Support

Based in: Germany
Speaks: German, English
Response time: Very quickly

Installation and activation

In Administration, go to Extensions > My extensions.
Install and activate Form Bot Blocker extension.

Configuration

In the Administration go to Extensions > My extensions.
Open the Configure of the Form Bot Blocker extension using the three dots on the right.

Forms

Here you can select forms that you want to protect.

Bot protection configurations

Under these configurations, you can enable and disable any protection methods. They work independently of each other and of Shopware CAPTCHAs. These methods try in different ways to detect and automatically block bots and users with suspicious activity. Enabling multiple methods increases the likelihood of detecting bots.

It is recommended to activate the following protection methods

Simple Honeypot Protector
Dynamic Honeypot Protector
Form Action Protector

Caution is advised when it comes to Reaction Time Protector. If you are unsure, leave this protection disabled.

CAPTCHA configurations

You can only activate CAPTCHAs integrated in Shopware in forms after several form submissions. Of course, Shopware CAPTCHA must be in Administration under Settings > Shop > Master data > CAPTCHA must be selected.

CAPTCHA configuration example

Form submissions before activating CAPTCHA: 3
Time after which form submissions expire (hours): 12

The following applies to CAPTCHA configuration example

Users and bots can make 2 form submissions within 12 hours. No CAPTCHA will be displayed to you.
CAPTCHA is activated after 3 form submissions within 12 hours. Form submissions are counted together even if users complete different supported forms.
Form submissions only expire 12 hours after the last form submission. CAPTCHA is deactivated and form submissions are counted from the beginning.

As long as CAPTCHA is not active, your forms will remain unprotected if you have not activated any protection methods!

Supported Shopware CAPTCHAs

Basic CAPTCHA
Google reCAPTCHA v2
Google reCAPTCHA v3

Additional configurations

Logs can be kept for bots and users with suspicious activity that have been blocked by protection methods. In the log you can track bot activities summarized under individual IP addresses. To do this, you should activate Save blocked bots to bot log.

You can have IP addresses stored as plain text in logs. This allows you to read individual IP addresses of bots and users with suspicious activity and, for example, take your own protective measures. Don't forget to follow the current GDPR regulations on the storage and processing of IP addresses.

Bot log

In the Administration under Settings > Extensions > Form Bot Blockercan view log for individual bots. Bot logs for bots that have not been active for 3 months will be automatically deleted. Here you can find statistics about individual bots and users with suspicious activity.

CAPTCHA log

CAPTCHA log can only be analyzed in the database. Old data is automatically deleted from the log. For example, in the log you can find bots that failed CAPTCHA suspiciously often.