Description
Activate it once. Quarivo Comment Shield quietly handles obvious spam.
Quarivo Comment Shield is a local, low-overhead comment spam filter built for site owners who want less notification noise without losing potentially important messages.
It combines several independent signals and never adds risk merely because of a comment’s language. Natural English and other multilingual messages are treated the same as Japanese comments.
A review inbox designed for real work
- Shows WordPress-stored moderation candidates at the top.
- Opens the full original comment, author details, score, reasons, and history in an accessible modal.
- Prioritizes unread, lower-confidence comments that may need human review.
- Searches by author, email address, IP address, or comment text.
- Filters by quarantined, unreviewed, possibly important, confirmed spam, restored, and all states.
- Shows 25, 50, or 100 rows per page without loading the entire quarantine at once.
- Processes every matching result in small resumable batches, even when thousands are waiting.
- Allows deletion only after a record has been confirmed as spam or restored.
- Keeps confirmed-spam records visible in a dedicated one-click view until retention cleanup or an explicit deletion.
Quiet protection with safe defaults
- Stops high-confidence automated spam before it enters the normal WordPress comments table.
- Uses a honeypot, cache-safe form token, timing signals, duplicate/rate checks, link patterns, and content heuristics.
- Suppresses comment notification noise only for comments intercepted by the plugin.
- Works with standard WordPress comments and includes compatibility handling for common AJAX comment flows.
- Requires no account, API key, CAPTCHA, or external service.
- Aggregates equivalent repeated spam into one review record and places a finite ceiling on unreviewed quarantine growth.
- Falls back to WordPress moderation instead of losing a comment when quarantine capacity is unavailable.
Conservative local learning
When a moderator restores or approves a false positive, or marks a comment as spam, the result is recorded locally. This works in both the Quarivo review inbox and the ordinary WordPress Comments screen. Repeated false positives can slightly reduce selected soft-signal weights. An exact author Website repeatedly confirmed as spam can add only a small supporting score when that same Website is also linked in a future comment. The stored Website key is hashed, expires after 180 days, and is capped at 500 entries. Strong security signals are never weakened automatically, and learned history never blocks a comment by itself. If a moderator later corrects a verdict, the earlier learning vote is replaced rather than counted twice.
“Publish and learn” can also allow the exact submitted email address. The plugin does not automatically trust a shared IP address or an entire email domain.
Privacy and retention
Quarantined comments remain on the site’s own database and are not sent to an external service. The plugin integrates with WordPress personal-data export and erasure tools.
Unreviewed quarantined comments are never removed automatically. Equivalent repeated submissions are grouped into one record, and a finite admission ceiling prevents unlimited growth. When capacity is unavailable, comments fall back to normal WordPress moderation. Confirmed-spam and restored records are removed after the administrator’s selected retention period (30 to 365 days). Action history is retained for up to one year.
If WordPress deletes the plugin, Quarivo data is retained by default so possible false positives can be recovered after reinstalling. Administrators can first download a private JSON export or explicitly choose permanent removal under Settings > Data and removal. Permanent removal deletes only Quarivo tables, settings, learning data, and Quarivo comment metadata; ordinary WordPress comments, posts, users, and media are not deleted.
Screenshots




Installation
- Upload the
quarivo-comment-shieldfolder to/wp-content/plugins/, or install it from the WordPress plugin directory. - Activate Quarivo Comment Shield through the Plugins screen.
- Use the activation guide, or open Comments > Quarantined Comments, to review candidates. Basic protection needs no setup.
- If another plugin also blocks or discards comments, test carefully and deactivate the overlapping filter to avoid double decisions.
FAQ
-
Does it block every non-Japanese comment?
-
No. Language is not a spam score. A natural English or other multilingual message is assessed using the same behavior and content evidence as a Japanese message.
-
Can I restore a legitimate comment?
-
Yes. Open the comment in the review inbox and restore it either as pending or published. You can also publish it and teach the plugin to trust that exact email address.
-
Does learning send comments to an AI or external API?
-
No. Feedback and score adjustments stay in the local WordPress database. No external service is used.
-
Can learning make protection unsafe?
-
Learning requires repeated moderator feedback and is tightly capped. False-positive history can slightly reduce selected soft signals. A repeatedly confirmed, exact linked Website can add a small supporting score, but never blocks a comment by itself. Honeypot hits and other strong signals are not weakened automatically.
-
What happens to old quarantine records?
-
Only reviewed records marked as confirmed spam or restored are removed after the selected retention period. Equivalent repeats are grouped. Unreviewed records remain until a moderator handles them, subject to a finite capacity; overflow falls back to WordPress moderation rather than being discarded.
-
Can I process thousands of quarantined comments at once?
-
Yes. Choose a filter, select “all matching results,” and apply the action. The browser requests a small server-side batch at a time and shows progress. The job has a fixed upper boundary so newly arriving comments are not unexpectedly included, retries brief connection failures, and can resume when the same moderator returns. Keep the review screen open while it is actively running.
-
What data is stored?
-
For quarantined comments, the plugin stores the submitted name, email address, URL, comment, IP address, browser information, submission time, target post, and local assessment details. This data remains on the site and is included in WordPress privacy export and erasure requests.
-
What happens on uninstall?
-
By default, WordPress plugin deletion retains quarantine records, action history, settings, local learning, and Quarivo comment metadata. Reinstalling Quarivo reconnects that data and shows a recovery notice. Temporary jobs, locks, and scheduled tasks are removed.
Before deletion, open Comments > Quarantined Comments > Settings > Data and removal. You can download a private JSON export for safekeeping or explicitly enable permanent removal. The JSON export is not imported automatically. Permanent removal requires a confirmed saved choice and deletes only Quarivo data; ordinary WordPress comments, posts, users, and media are never removed.
While the plugin is absent, its review screen and WordPress privacy exporter/eraser are unavailable.
-
Where did a comment go after I confirmed it as spam?
-
It was not immediately deleted. Open the Confirmed spam count at the top of the review inbox, or choose Confirmed spam from the status filter. The record remains reviewable until you explicitly delete it or the reviewed-record retention period ends.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Quarivo Comment Shield” is open source software. The following people have contributed to this plugin.
ContributorsTranslate “Quarivo Comment Shield” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
2.2.7
- Retains Quarivo data by default when WordPress deletes the plugin and reconnects it after reinstallation.
- Adds a confirmation-protected permanent-removal option that deletes only Quarivo data.
- Adds verified data counts, a private streamed JSON export, and a direct review link before removal.
- Keeps Confirmed spam records visible in a one-click filtered view until explicit deletion or scheduled retention cleanup.
- Applies fail-safe defaults and site-by-site removal choices on multisite.
2.2.6
- Improved language-neutral structural spam detection and local learning from WordPress moderation actions.
- Added regression coverage for historical, adversarial, multilingual, same-site, and legitimate comments.
2.2.4
- Clarified important-review filtering and the exact effect of each bulk action.
2.2.3
- Improved compound link-spam detection while keeping languages, missing JavaScript, shared IP addresses, and normal reference links neutral or non-conclusive.
