Blog
Notes, background and the occasional opinion.
Basics
28.09.2026
WordPress contact forms: a security checklist
Contact Form 7, WPForms, Gravity Forms, Ninja Forms or Fluent Forms – the plugin matters less than how it is set up and maintained. Here is …
Read article
Basics
19.08.2026
What actually protects a form: CAPTCHA, honeypot, time trap, CSRF
Most contact forms rely on a single trick against spam, and many of those tricks only stop the simplest bots. What each protection layer sto…
Read article
Basics
11.08.2026
Why contact forms get spammed – and why it's more than an annoyance
Form spam looks like a nuisance you simply delete. In fact it can turn your form into a mail relay, hurt your domain's reputation and bury t…
Read article