KOZ URL-Only Comment Spam

KOZ URL-Only Comment Spam is a focused moderation tool for a common low-effort spam pattern: comments containing only one or more links. It can send matching comments directly to spam or hold them for manual moderation while ordinary comments continue through the normal WordPress workflow.

The detector removes HTML and invisible spacing characters before checking the visible content. It can exempt logged-in users, trust same-site links and approved domains, and lets an administrator test a sample without saving that sample.

Privacy remains deliberately limited. The plugin stores no comment text, detected URL, IP address, email, referrer, cookie, fingerprint or user-agent value. It stores only aggregate counts and a small summary of the latest match.

Use case: a public website receives repeated comments made entirely of promotional URLs. The plugin removes that noise before it reaches the normal review queue, without sending comment data to an external service.

Use case: a community site permits internal resource links but wants external URL-only comments reviewed. Trusted-domain settings allow internal destinations while suspicious external links are handled automatically.

The plugin was originally developed for the UA FREE charitable foundation website, which remains a production test environment. Development and ownership belong to Tony Kozyriev (ramirkz). Foundation donations and developer support are separate.

Features:

• Detect one or more URL-only values after HTML and invisible spacing are removed.
• Preserve comments that contain human-readable text.
• Ignore pingbacks, trackbacks, administrators and comment moderators.
• Optionally exempt all logged-in users.
• Optionally trust same-site links and selected domains.
• Choose between spam and moderation queue.
• Test samples without saving them.
• Administration interface in Ukrainian, Chinese, Spanish, Arabic, Indonesian, Portuguese, French, Japanese, German and Hindi; English fallback.
• No external requests, telemetry, cookies, cron jobs or custom database tables.