I am thinking about porting an existing D6 site to Drupal 7. The main shortcoming that I see is that the splendid Spam module is still missing for Drupal 7.

I don't want to relay on third-party services, so I wonder whether there is any plan to port the Spam module to Drupal 7 and if not, what alternative spam filter can be used for Drupal 7.


I think you were looking for an antispam module, weren't you? Try Mollom.

It kills comment, contact form and registration form spam, has image and audio CAPTCHA service.

Try it, it is made by Drupal core developers.

| improve this answer | |
  • Actually, just a part of the Drupal core developers are involved with the development of the Mollom module. – kiamlaluno Oct 27 '11 at 13:13
  • Yep, I am looking for antispam module and I am aware of Mollom, but as I said I am not willing to pay for 3rd party services. Also, I like the regex control that Spam module provides and doubt that Mollom offer that. – alfish Oct 27 '11 at 17:30
  • 1
    Note that Mollom does have a free option – goron Sep 10 '12 at 5:01

I have good results with Captcha module.

| improve this answer | |
  • 2
    Captcha is simply not enough to avoid human spammers. – alfish Oct 28 '11 at 1:16
  • A good extension for the CAPTCHA module is Hidden Captcha drupal.org/project/hidden_captcha It makes a hidden input to your forms that must remain empty, but spambots can't distinguish this input from the rest, so they'll fill this out as well, this way they can't submit, but there is no extra effort involved for real visitors. – Bálint Deáki Jan 2 '13 at 13:48

Honeypot (a module I maintain) works pretty well for small-to-medium sites in most cases. It doesn't require any extra user intervention, and catches most automated spam. It's also really fast (no expensive calculations or external API requests).

It's being modified currently for use on Drupal.org, and will be much better at also catching human spammers (it's already defeating some incredibly persistent spammers from Vietnam).

If you can't get spam blocked with Honeypot, you may want to consider Mollom or another more 'active' spam prevention service. However, I've been using Honeypot on my sites for the past year or so and have only had to move one site to Mollom due to persistent and dedicated spammers.

| improve this answer | |

These days there are quite a few alternatives to pick from to answer this question. Here is a summary of the modules that I think are the most popular / appropriate (in no specific order though), with quotes from their project pages:

  • Honeypot

    Honeypot uses both the honeypot and timestamp methods of deterring spam bots from completing forms on a Drupal site. These methods are effective against many spam bots, and are not as intrusive as CAPTCHAs or other methods which punish the user.

  • Anti Spam by CleanTalk

    Invisible antispam without CAPTCHA, questions, puzzles, counting animals, math and etc. Just install and forget.

    CleanTalk is a SaaS spam protection service for Web-sites.

    CleanTalk uses protection methods which are invisible for site visitors. Using CleanTalk eliminates needs in CAPTCHA, questions and answers, and other methods of protection, complicating the exchange of information on the site.

  • BOTCHA Spam Prevention

    BOTCHA Spam Prevention is a highly configurable non-CAPTCHA spam protection framework.

    BOTCHA, doesn't abuse human users, BOTCHA protection is completely transparent to them and non-intrusive.

  • Mollom

    Mollom is an intelligent content moderation web service. By monitoring content activity on all sites in the Mollom network, Mollom is in a unique position to determine if a post is potentially spam; not only based on the posted content, but also on the past activity and reputation of the poster. In short, Mollom handles incoming posts intelligently, in much the same way a human moderator decides what posts are acceptable. Therefore, Mollom enables you to allow anonymous users to post comments and other content on your site.

  • Captcha

    A CAPTCHA is a challenge-response test most often placed within web forms to determine whether the user is human. The purpose of CAPTCHA is to block form submissions by spambots, which are automated scripts that post spam content everywhere they can. The CAPTCHA module provides this feature to virtually any user facing web form on a Drupal site.

  • reCaptcha

    Uses the Google reCAPTCHA web service to improve the CAPTCHA system and protect email addresses.

The above is an incomplete list, there are many, many more solutions to pick from ... This module comparison is nicely organized in sections like so:

  • CAPTCHAs - Modules which present the user with a code or challenge to complete.
  • Content-focused Modules - Modules which flag or filter content.
  • Content analysis-focused Modules - Modules with analyze content.
  • Email Modules - Modules for obstructing email addresses.
  • Honeypot Modules - Modules which trick bots into making mistakes.
  • User-focused Modules - Modules which focus on the user or session.
  • Sandbox projects.
  • Unreleased/Unsupported/Obsolete/Deprecated.

PS: the Spam module still doesn't have a D7 version these days ... (and its development status is "maintenance fixes only).

| improve this answer | |

If you want more funny and feature rich CAPTCHA than you can try Are You Human Captcha.

In Drupal there is Sandbox project, you can try it out are_you_a_human project.

As it is in sandbox please don't use directly on live site, just test it on local.

| improve this answer | |

Not the answer you're looking for? Browse other questions tagged or ask your own question.