Commentinel Spam Comment Cleaner

Adds Comments → Spam Cleaner to wp-admin. Pick which folder to scan, hit Scan comments, and every comment that matches your rules is listed with the reason it was flagged. Tick what you want (everything is pre-ticked) and apply one bulk action to the lot.

Rules included:

• Links in the comment — any http://, https://, www., anchor tag or BBCode link. Threshold is configurable (default: 1 link).
• Author website field filled — the classic link-drop signal.
• Link inside author name or email.
• SQL injection / scanner probes — PG_SLEEP, WAITFOR DELAY, UNION SELECT, BENCHMARK(), EXTRACTVALUE(), information_schema, ' OR 1=1--, ${jndi: and more.
• Script / HTML injection — script and iframe tags, javascript: URLs, inline event handlers.
• BBCode links — [url=...], [link=...].
• Custom keywords — your own list, matched against comment, author, email, website and IP.
• Numeric or empty author name — catches the “1” that injection scanners use.
• Repeat IP address — an IP with more than N comments.

Bulk actions: Move to Trash, Mark as Spam, Delete Permanently, and Approve (to clear a false positive out of the list).

Scanning and deleting run in batches over AJAX, so tens of thousands of comments will not time the request out.

Optionally the same rules can run on new submissions: send matches straight to the spam folder, or reject them outright.