To install Kratos Anti Spam on your Joomla website please follow the guide below:

1. Install the plugin as any other Joomla extension
2. After installation you will need to go to Plugin Manager page
3. Search "Kratos" in Plugin Manager
4. Enable the Kratos Anti Spam plugin
5. Add your Kratos Anti Spam plugin license key (the license is per domain name)
6. Add protect exclude urls (i.e.: third party services like payment processor notification urls)
7. Optional configuration can be found in the plugin configuration

Done! Your website is protected against any bots.

We will mimic a spam bot and try to send a form to this website, for this example we will send a post search request.
Please click on "Demo" button to see what happens when a post request is protected by Kratos Anti Spam.
Below is the source code for a curl post request, how a bot would submit spam to your website:

$url = "http://www.softpill.eu";
$reffer = "http://www.softpill.eu";
$post_fields = 'searchword=kratos&task=search&option=com_search&Itemid=101';

$cookie_file_path = "./cook";
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $post_fields);
curl_setopt($ch, CURLOPT_REFERER, $reffer);
curl_setopt($ch, CURLOPT_COOKIEFILE, $cookie_file_path);
curl_setopt($ch, CURLOPT_COOKIEJAR, $cookie_file_path);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$result = curl_exec($ch);
curl_close($ch);
echo $result;
      

Why do I get the "Invalid token." error when I refresh the page?

Another feature of Kratos Anti Spam is to block resending the same post request, i.e.: user completes a form and sends it, and then refreshes the page, resubmitting the same request, this duplication is blocked.

How do I stop protection if user is logged in?

To stop protection when users are logged in, please go to plugin settings and choose "No" for "Protect if logged" setting.

How do I choose which part of my website to be protected?

In plugin settings you may choose to protect your Joomla website in front-end, administration back-end or both.

My website is slower after installing Kratos Anti Spam, what todo?

If your website gets slower after installing the plugin, please go to plugin settings and set "No" the "Ajax Key Request" setting, which is default to "Yes".

My website payment gateway stopped working properly.

Because Kratos Anti Spam will block all POST requests that are not checked by itself, you need to add in the plugin configuration as exceptions the URLs that your payment gateway uses for notifying your website, if you need assistance please contact support.

My website got broken after installing the plugin, what todo?

It seams that there are some javascript conflicts on your website, in this case please go to plugin settings and choose "Head Bottom" or "Body Bottom" in the "Loading position" setting, if this doesn't fix the problem please contact support.