Sender Click Authorization for Contact Form 7
All DynoReg software · Product support
View current pricing and buy on CodingRepo
Sender Click Authorization turns every protected Contact Form 7 submission into a verified conversation. Instead of delivering a message immediately, it asks the sender to confirm the email address with one click. Unverified submissions never reach your inbox, helping eliminate fake leads, disposable contact attempts, bot noise, and repeat abuse.
Zero Spam starts with a real sender
Traditional spam filters try to guess whether a message is legitimate after it has already been submitted. Sender Click Authorization changes the workflow: the sender must prove access to the email address before Contact Form 7 delivers the message. The result is a cleaner inbox and a stronger signal that every delivered inquiry came from someone willing and able to verify it.
Block repeat offenders automatically
Verification history connects form activity with validated IP addresses and abuse signals. Block an exact IPv4 or IPv6 address directly from the log, maintain administrator-managed rules, and use repeat-offender detection to stop recurring attacks. Automated Cloudflare rules can move enforcement beyond WordPress so known abusive traffic is challenged or blocked at the network edge before it keeps reaching your forms.
IP scanning and approximate geolocation
Every verification event can record the sender IP address and add approximate country, region, and city context when geolocation is enabled. Administrators can review the complete verification lifecycle, open additional IP details on demand, and act on suspicious sources without switching between disconnected tools. Geolocation is approximate and may not be available for every address.
Protect every form—or only the ones that need it
Enable sender verification across every Contact Form 7 form or choose individual forms. Selective coverage is ideal when public lead forms need protection but internal, login-gated, or trusted workflows should continue without an extra verification step.
Built for real administration
A dedicated pending-verifications queue lets administrators inspect submissions, send a verified message manually when appropriate, delete individual entries, or clear the queue. Configurable expiration removes abandoned submissions automatically. Verification email and post-submit message templates support common form placeholders, while message colors can be matched to the site design.
Blocked sender-domain controls reject unwanted email domains before a verification message is sent. Durable logs distinguish pending, verified and sent, administrator-sent, expired, blocked, deleted, and delivery-failure outcomes. Retention controls and hourly pruning keep that history manageable.
Integration and privacy controls
A site-key-protected REST endpoint can list, add, and remove IP block rules for security automation and centralized management. WordPress privacy-policy guidance plus personal-data export and erasure integrations help administrators account for stored sender emails, IP addresses, approximate locations, and verification history.
Simple pricing with lifetime updates
The plugin is $49. Future product updates are included free for life. One year of support is available for $99, and existing customers can renew support for another year at the same $99 price.
Ideal for
- Business and lead-generation sites that need real inquiries instead of inbox noise.
- Agencies protecting multiple public Contact Form 7 forms.
- High-abuse websites dealing with bots and repeat offenders.
- Security-conscious administrators who want visible logs, IP context, and actionable rules.
- Sites behind Cloudflare that want abuse signals converted into automated edge rules.
Important notes
- Contact Form 7 is required.
- A working WordPress email-delivery configuration is required for verification messages.
- Automated Cloudflare enforcement requires Cloudflare configuration and an eligible Cloudflare account.
- IP geolocation is approximate, may use configured third-party services, and may be unavailable.
- Site owners should disclose applicable email, IP-address, geolocation, and retention processing in their privacy policy.
Questions about Sender Click Authorization for Contact Form 7
What happens to an unverified Contact Form 7 message?
Sender Click Authorization holds the protected submission and emails the sender a one-time confirmation link. The message reaches the intended recipient after the sender verifies access to that mailbox. Unverified or expired submissions are not delivered. Verification establishes mailbox access; it cannot guarantee that a human inquiry is useful or prevent every form of abuse.
Can I protect selected forms rather than every form?
Yes. Enable all-form protection or select individual Contact Form 7 forms. Start with the public lead forms that need verification and test the complete submission and confirmation flow with a mailbox you control before applying it to every workflow.
What if a sender cannot find the verification email?
Check junk folders, the submitted email address and your WordPress mail-delivery configuration. Contact Form 7 and working WordPress email are required. An administrator can inspect the pending-verifications queue and choose Send Now when appropriate, or remove an entry. Do not forward private submission contents or verification tokens in a public support message.
How do blocking and geolocation work?
Administrators can block exact IPv4 or IPv6 addresses from logs, manage IP rules and block sender email domains before verification mail is sent. Optional approximate country, region and city context depends on configured services and may be unavailable. Automated Cloudflare enforcement requires your own suitable account and configuration; it is optional.
What personal data and cleanup controls should I review?
Depending on configuration, verification records include sender emails, IP addresses, approximate locations and lifecycle history. Set expiration and log retention, disclose the applicable processing in your privacy policy, and use the provided export and erasure integrations when needed. Hourly cleanup removes abandoned entries according to configuration; do not assume immediate deletion.
What does Sender Click Authorization for Contact Form 7 cost, and are updates and support included?
The current CodingRepo listing is $49 for a one-time purchase, with free future product updates. Optional product support is $99 per year and is separate from the purchase and any hosting or third-party services. Check the linked CodingRepo product page for the current price, package and purchase terms before buying.
Browse Sender Click Authorization for Contact Form 7 support