• v0.1.1 82c3dddfc8

    kw released this 2026-09-25 10:33:33 +00:00 | 0 commits to main since this release

    Nolimit Forms 0.1.1

    Three fixes to how a submission is judged, all of them found by Nolimit
    Security reading how this plugin files rather than refuses.

    An address you have allowlisted in Nolimit Security is never filed as
    spam, and skips this plugin's honeypot. Their firewall checks the
    allowlist before the block list, so an allowlisted address carrying a
    stale block row is let through — and a verdict that outlived that would
    have binned your own submission on the strength of a block nothing was
    enforcing. The allowlist exists so you can get back in when a rule has
    gone wrong.

    A logged-in member of staff is never filed as spam. Without this, an
    administrator filling in their own contact form from an office address
    that happens to be on a threat list had their submission binned.

    Submissions filed as spam are deleted after 30 days by default. A rate
    limit bounds how fast a bot can submit, never how much it can
    accumulate, so without a cap the table grows for as long as one cares to
    keep going.

    Tested up to: 7.1.2

    Downloads