iPray includes built-in tools to help block unwanted or automated submissions while staying user-friendly.

Invisible Anti-Spam Measures

✔ Honeypot Field (Hidden)

The prayer form includes a hidden field meant to trap bots.

Real visitors do not see it. Bots often fill every input, triggering rejection.

If a bot triggers the honeypot:

• The form is silently rejected

• The visitor sees no error (to avoid revealing spam defenses)

✔ Country Detection (Optional)

When enabled under:

Prayers → Settings → General → Detect submitter country

The plugin automatically identifies the visitor’s country using a lightweight lookup service.

This helps:

• Identify spam patterns

• Display country flags or labels on the prayer list (optional theme handling)

This happens invisibly without adding fields to the form.

✔ Email Validation

The form prevents invalid or obviously fake emails from being submitted.

✔ Rate-Limiting Through Browser Session

Each browser session is considered unique.

This helps reduce repeated automated submissions.

✔ Clean AJAX Workflow

Because the form is fully AJAX-based:

• Bots cannot simply post to the URL without valid form checks

• Nonce validation ensures submissions originate from your site

These protections work together without disrupting real users.