Total CMS extension

Bot Gate extension

Total CMS 3.6.3's honeypot and signed-token bot protection for the forms you build yourself, with a send helper that needs no JavaScript and a report of what was turned away.

v1.1.0Total CMS 3.6.3+Every edition

The Bot Gate admin page: 217 submissions turned away in 30 days, with the reasons and the forms they targeted
What it does

Everything you need to keep bots out

Forms you write yourself can't get Total CMS's bot token, so they can't use Require Bot Protection. Bot Gate fixes that.

Forms

Total CMS's own protection

One line of Twig prints the hidden honeypot and signed time-trap token the form builder uses. No CAPTCHA, nothing for visitors to do.

Easy

No-code send helper

Name your Mailer templates on the form. It waits out the trap, refreshes old tokens, shows your thank-you message and never silently loses one.

Admin

Turned away

What Total CMS's bot check refused in the last 30 days: per day, why in plain words, and which template or collection.

Admin

What's protected

Every Mailer template and public collection that takes anonymous sends, whether Require Bot Protection is on, and a link to switch it.

Admin

Check a page

Loads a page as a logged-out visitor and checks each form: token, collection, helper, protected templates, and whether the page is cached.

Developers

Sign-ups, creates and scripts

Protects forms that create objects or register members too, or call BotGate.send() from your own script. Coding agents get a skill.

How it works

Protected in three steps

Do them in this order: with protection on before a form carries the fields, real messages are dropped without an error.

01

Add it to your form

Upload the zip in Settings → Extensions and switch it on. Add bot_gate.fields() and data-bot-gate-send to your form, and bot_gate.script() to the page.

02

Test it logged out

Send a test from a private window. Signed-in people are never checked, so a test while logged in proves nothing.

03

Switch on protection

Turn on Require Bot Protection on each Mailer template the form sends, then confirm it with Check a page on the Bot Gate page.

Full setup notes →
Release notes

Latest releases

v1.1.0

31 October 2026 · minor · Requires Total CMS 3.6.3+

After a while, the Bot Gate page asks once whether you'd like to leave a rating. It's only a link: Bot Gate sends nothing.

Added

  • A "Rate this extension" card at the bottom of the Bot Gate page, shown once after 14 days and 25 submissions turned away
  • Leave a rating opens Bot Gate's page on speedywebsites.com.au in a new tab; No thanks hides the card for good
  • A running count of turned-away submissions, so the count isn't lost when Total CMS rotates its logs
Upgrade notes

Nothing to switch on: no new permissions. The card never appears on public pages, and Bot Gate still makes no outside contact except its update check.

Show 2 older releases

v1.0.1

27 October 2026 · patch · Requires Total CMS 3.6.3+

Fixes the Bot Gate admin page scrolling on past its end into an empty strip.

Fixed

  • The Bot Gate admin page could keep scrolling past its end into an empty (black in dark mode) strip

v1.0.0

27 October 2026 · major · Requires Total CMS 3.6.3+

Total CMS's built-in bot protection for forms you build yourself, so their Mailer templates and collections can switch on Require Bot Protection. No CAPTCHA for visitors, no JavaScript to write. Free.

Added

  • bot_gate.fields() prints Total CMS 3.6.3's honeypot and signed time-trap token into any hand-built form: Mailer sends, public creates and sign-ups
  • No-code sending: add data-bot-gate-send="template-id" to a form and {{ bot_gate.script()|raw }} to the page
  • The helper waits out the 3-second trap, sends the right collection, renews a token on a page left open for a day, shows a message in the form and never drops a message silently
  • BotGate.send() for your own scripts, with events and clear results (sent, expired, rate limited, failed)
  • Bot Gate admin page: what was turned away in the last 30 days and why, from Total CMS's own logs
  • See every Mailer template and public collection, and whether Require Bot Protection is on
  • Check a page: loads any page as a logged-out visitor and checks each form on it
  • Copy-ready code for every kind of form
  • Default collection setting, built-in updater, and a skill for coding agents such as Claude Code
Upgrade notes

Needs Total CMS 3.6.3 or later, any edition (Mailer templates need Standard or higher). After installing, open Bot Gate in the sidebar for code to copy. Add it to your form, send a test as a logged-out visitor (a private window), and only then switch on Require Bot Protection on the Mailer template. Signed-in people are never checked, so a test while logged in proves nothing.

What people say

Reviews.

No reviews yet. Be the first.

Write a review

Your rating of Bot Gate
Never shown. Use the address you bought Pro with to be marked as a verified customer.

Your name (as first name and initial) and review may be shown on this page; your email is never shown. Reviews appear once they’re approved, and one review per person per extension (a new one replaces your earlier one).

Need something custom?

We build Total CMS extensions and integrations for businesses and other developers. Tell us what you need.

Get in touch
Call us