ContactWarden
StableContact-form abuse detection for any PHP app — secure by default.
Most anti-spam approaches are a single gate: one check, pass or fail. ContactWarden scores every submission across several independent signals — honeypot, server-side timing, signed single-use tokens, decaying IP reputation, content heuristics and rate limiting — and only acts once the evidence adds up.
No single weak signal ever turns away a real person, nothing is a permanent ban, and a visitor without JavaScript is challenged rather than silently locked out. It's framework-agnostic and powers the contact form on this site.
Companion projects
-
CodeIgniter 4 connector Admin UI for ContactWarden in CodeIgniter 4 apps.
-
Laravel connector Admin UI for ContactWarden in Laravel apps.
-
Plain-PHP connector Admin UI for ContactWarden with no framework required — and the smallest working example of a connector.