at path:
ROOT
/
wp-content
/
plugins
/
contact-form-7
/
modules
/
disallowed-list.php
run:
R
W
Run
akismet
DIR
2026-02-08 11:50:06
R
W
Run
constant-contact
DIR
2026-02-08 11:50:06
R
W
Run
recaptcha
DIR
2026-02-08 11:50:06
R
W
Run
sendinblue
DIR
2026-02-08 11:50:06
R
W
Run
stripe
DIR
2026-02-08 11:50:06
R
W
Run
turnstile
DIR
2026-02-08 11:50:06
R
W
Run
acceptance.php
7.3 KB
2026-02-08 11:50:06
R
W
Run
Delete
Rename
checkbox.php
9.88 KB
2026-02-08 11:50:06
R
W
Run
Delete
Rename
count.php
1.45 KB
2026-02-08 11:50:06
R
W
Run
Delete
Rename
date.php
6.08 KB
2026-02-08 11:50:06
R
W
Run
Delete
Rename
disallowed-list.php
1.83 KB
2026-02-08 11:50:06
R
W
Run
Delete
Rename
doi-helper.php
730 By
2026-02-08 11:50:06
R
W
Run
Delete
Rename
file.php
6.94 KB
2026-02-08 11:50:06
R
W
Run
Delete
Rename
flamingo.php
8.42 KB
2026-02-08 11:50:06
R
W
Run
Delete
Rename
hidden.php
776 By
2026-02-08 11:50:06
R
W
Run
Delete
Rename
listo.php
755 By
2026-02-08 11:50:06
R
W
Run
Delete
Rename
number.php
6.64 KB
2026-02-08 11:50:06
R
W
Run
Delete
Rename
quiz.php
6.81 KB
2026-02-08 11:50:06
R
W
Run
Delete
Rename
really-simple-captcha.php
13.45 KB
2026-02-08 11:50:06
R
W
Run
Delete
Rename
reflection.php
2.27 KB
2026-02-08 11:50:06
R
W
Run
Delete
Rename
response.php
460 By
2026-02-08 11:50:06
R
W
Run
Delete
Rename
select.php
6.62 KB
2026-02-08 11:50:06
R
W
Run
Delete
Rename
submit.php
2.7 KB
2026-02-08 11:50:06
R
W
Run
Delete
Rename
text.php
8.39 KB
2026-02-08 11:50:06
R
W
Run
Delete
Rename
textarea.php
5.25 KB
2026-02-08 11:50:06
R
W
Run
Delete
Rename
error_log
up
📄
disallowed-list.php
Save
<?php add_filter( 'wpcf7_spam', 'wpcf7_disallowed_list', 10, 2 ); function wpcf7_disallowed_list( $spam, $submission ) { if ( $spam ) { return $spam; } $target = wpcf7_array_flatten( $submission->get_posted_data() ); $target[] = $submission->get_meta( 'remote_ip' ); $target[] = $submission->get_meta( 'user_agent' ); $target = implode( "\n", $target ); $word = wpcf7_check_disallowed_list( $target ); $word = wpcf7_apply_filters_deprecated( 'wpcf7_submission_is_blacklisted', array( $word, $submission ), '5.3', 'wpcf7_submission_has_disallowed_words' ); $word = apply_filters( 'wpcf7_submission_has_disallowed_words', $word, $submission ); if ( $word ) { if ( is_bool( $word ) ) { $reason = __( 'Disallowed words are used.', 'contact-form-7' ); } else { $reason = sprintf( /* translators: %s: comma separated list of disallowed words */ __( 'Disallowed words (%s) are used.', 'contact-form-7' ), implode( ', ', (array) $word ) ); } $submission->add_spam_log( array( 'agent' => 'disallowed_list', 'reason' => $reason, ) ); } $spam = (bool) $word; return $spam; } function wpcf7_check_disallowed_list( $target ) { $mod_keys = get_option( 'disallowed_keys' ); if ( is_scalar( $mod_keys ) ) { $mod_keys = trim( $mod_keys ); } else { $mod_keys = ''; } if ( '' === $mod_keys ) { return false; } foreach ( explode( "\n", $mod_keys ) as $word ) { $word = trim( $word ); $length = strlen( $word ); if ( $length < 2 or 256 < $length ) { continue; } $pattern = sprintf( '#%s#i', preg_quote( $word, '#' ) ); if ( preg_match( $pattern, $target ) ) { return $word; } } return false; } function wpcf7_blacklist_check( $target ) { wpcf7_deprecated_function( __FUNCTION__, '5.3', 'wpcf7_check_disallowed_list' ); return wpcf7_check_disallowed_list( $target ); }