Bug-fix release: resolves a WordPress 6.7+ early-translation-loading notice and hardens database queries. No settings or data changes.<\/p>","1.0.0":"
Initial release.<\/p>"},"ratings":[],"assets_icons":{"icon-256x256.png":{"filename":"icon-256x256.png","revision":3669724,"resolution":"256x256","location":"assets","locale":"","width":1254,"height":1254}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3669724,"resolution":"1544x500","location":"assets","locale":"","width":1983,"height":793}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.2"],"block_files":[],"assets_screenshots":[],"screenshots":{"1":"Dashboard: status counters, 30-day activity chart, most-reused clicks, top countries, and most-blocked visitors.","2":"Click Records: every captured click with its status, confidence score, and expandable event history.","3":"Settings: seven tabs covering detection, protection, the blocked page, forms, tracking IDs, privacy, and advanced options.","4":"Protection settings, including the fully adjustable confidence-scoring weights.","5":"The blocked-click notice a visitor sees, with configurable wording and colours.","6":"Diagnostics: current configuration, CDN detection, and detected form plugins."}},"plugin_section":[],"plugin_tags":[4270,986,34183,985,322],"plugin_category":[],"plugin_contributors":[264704],"plugin_business_model":[],"class_list":["post-353608","plugin","type-plugin","status-publish","hentry","plugin_tags-click-fraud","plugin_tags-conversion-tracking","plugin_tags-gclid","plugin_tags-google-ads","plugin_tags-ppc","plugin_contributors-arfarehman","plugin_committers-arfarehman"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/vetraclix-for-google-ads\/assets\/icon-256x256.png?rev=3669724","icon_2x":"https:\/\/ps.w.org\/vetraclix-for-google-ads\/assets\/icon-256x256.png?rev=3669724","generated":false},"screenshots":[],"raw_content":"\n
Every paid click that reaches your site carries a click identifier - Every one of those replays looks to your analytics exactly like a fresh paid click. Your conversion data drifts. Your cost-per-lead looks wrong. And your sales team calls leads that came from an ad click nobody paid for.<\/p>\n\n Vetraclix records every ad click the first time it arrives, then refuses to let it count twice.<\/strong><\/p>\n\n Genuine visitors are never affected. Organic and direct traffic carries no click identifier at all and is ignored completely.<\/p>\n\n Google Ads ( Submissions made under an invalid click session are rejected and logged, with built-in integrations for Contact Form 7<\/strong>, Gravity Forms<\/strong>, WPForms<\/strong>, Fluent Forms<\/strong>, Elementor Forms<\/strong>, and Forminator<\/strong>. Each one can be switched on or off individually, and the rejection message is yours to write.<\/p>\n\n In PHP:<\/p>\n\n In JavaScript:<\/p>\n\n Both answer \"yes\" when the plugin is deactivated, so a gated tag can never be silently lost.<\/p>\n\n A dashboard with status counters and a 30-day activity chart; a searchable, filterable record of every click with its score and full visit history; a grouped event log; CSV export; and a diagnostics screen showing exactly what the plugin is configured to do and what it can see.<\/p>\n\n IP addresses and user agents are stored as a salted, one-way SHA-256 hash - enough to recognise the same visitor reusing a click, impossible to reverse. Storing readable IP addresses alongside the hash is a separate setting you can leave switched off; if you turn it on, disclose it in your privacy policy. The plugin's own click-fraud detection makes no external requests and sends no data anywhere outside your own site.<\/p>\n\n This plugin's own fraud-detection engine makes no external requests. It has one optional, off-by-default feature that does: Print Snippets For Me<\/strong>, under Settings \u2192 Tracking IDs. It exists only for sites with no tag manager already installed; when enabled, it loads the tracking scripts for the ad network IDs you enter, gated behind the same click-validity check the rest of the plugin uses. No account is created and no data is sent to these services by the plugin itself beyond loading the script you asked for; whatever that script then does is between your site and the ad network, governed by that network's own terms.<\/p>\n\n If you already have any of these tags installed through a tag manager or another plugin, leave Print Snippets For Me<\/strong> off and gate your existing tags with Nothing else is required. Sensible defaults are applied on activation.<\/p>\n\n\n No. A visitor with no ad click identifier in their session - all organic, direct, referral and social traffic - is never touched. Only a session that arrived from a paid click can ever be gated, and then only once that click has expired or looks reused.<\/p><\/dd>\n No. It controls when<\/em> your existing tags are allowed to fire. It does not replace Google Tag Manager, GA4, or your conversion tags, and it never sends data to Google on your behalf.<\/p><\/dd>\n No - leave Print Snippets For Me<\/strong> switched off. It exists for sites with no tag manager at all. If you already have tags installed, printing a second copy would double-count every pageview. Gate your existing tags with A click identifier is valid only for its very first visit. If the same value appears in a URL again - from the same visitor or anyone else - it is immediately expired. This is the strictest setting, and suits businesses that want every click to be strictly one-time.<\/p><\/dd>\n No. A CDN or WAF is detected automatically when present and its headers are used for more accurate IP and country data, at no extra cost. Cloudflare, Amazon CloudFront, Fastly, Sucuri and Akamai are recognised out of the box, and a filter lets you add others. Sites with no CDN work normally; they simply have no country data.<\/p><\/dd>\n Not if you are signed in. Ignore Signed-in Users<\/strong> is on by default, precisely because site owners and agencies click their own ads far more often than they expect.<\/p><\/dd>\n Yes. Turn Enable Click Blocking<\/strong> off under Protection<\/strong>. Clicks are still captured, scored and reported, but no visitor is ever interrupted and no tracking is withheld. Run it that way for a week, look at the records, then decide.<\/p><\/dd>\n Yes. Change Required Capability<\/strong> under Advanced<\/strong> to a capability their role holds.<\/p><\/dd>\n No measurable amount. Capture is one indexed database query on a paid-click landing, and nothing at all for organic traffic. There are no external HTTP requests during a page load, and the admin assets load only on the plugin's own screens.<\/p><\/dd>\n\n<\/dl>\n\n\ngclid<\/code> from Google Ads, msclkid<\/code> from Microsoft Advertising, fbclid<\/code> from Meta. Those identifiers are meant to be used once, by one visitor. In practice they get shared in messages, pasted into forums, replayed by bots, indexed by scrapers, and clicked again days later by people who never saw your ad.<\/p>\n\nHow it works<\/h4>\n\n
\n
What makes it different<\/h4>\n\n
\n
<head><\/code> has already fired and already counted the visit. Vetraclix intercepts on template_redirect<\/code>, before your theme is loaded at all, so a bad click never reaches a single tracking tag.<\/li>\nAd networks supported<\/h4>\n\n
gclid<\/code>, gbraid<\/code>, wbraid<\/code>), Microsoft Advertising (msclkid<\/code>), Meta Ads (fbclid<\/code>), TikTok (ttclid<\/code>), X\/Twitter (twclid<\/code>), LinkedIn (li_fat_id<\/code>), Pinterest (epik<\/code>), and Impact\/affiliate (irclickid<\/code>). Enable only the networks you actually advertise on.<\/p>\n\nForm protection<\/h4>\n\n
Gating your own tracking<\/h4>\n\n
if ( function_exists( 'click_guardian_can_track' ) && click_guardian_can_track() ) {\n \/\/ Print or enqueue your conversion tag here.\n}\n<\/code><\/pre>\n\nwindow.ClickGuardian.whenTrackable( function () {\n \/\/ Fire your conversion event here.\n} );\n<\/code><\/pre>\n\nReporting<\/h4>\n\n
Privacy<\/h4>\n\n
External services<\/h3>\n\n
\n
googletagmanager.com\/gtm.js<\/code> and\/or googletagmanager.com\/gtag\/js<\/code> when a GTM container ID, GA4 measurement ID, or Google Ads conversion ID is entered and this feature is enabled. Sent when: on every page load where tracking is allowed. Google Terms of Service<\/a>, Google Privacy Policy<\/a>.<\/li>\nbat.bing.com\/bat.js<\/code> when a UET tag ID is entered and this feature is enabled. Sent when: on every page load where tracking is allowed. Microsoft Services Agreement<\/a>, Microsoft Privacy Statement<\/a>.<\/li>\nconnect.facebook.net\/en_US\/fbevents.js<\/code> and sends a PageView event when a Pixel ID is entered and this feature is enabled. Sent when: on every page load where tracking is allowed. Meta Terms of Service<\/a>, Meta Privacy Policy<\/a>.<\/li>\n<\/ul>\n\nclick_guardian_can_track()<\/code> instead - see \"Gating your own tracking\" above.<\/p>\n\n\n\n
\/wp-content\/plugins\/<\/code>.<\/li>\nclick_guardian_can_track()<\/code>, or turn on Print Snippets For Me<\/strong> under Tracking IDs<\/strong> if you have no tag manager yet.<\/li>\n<\/ol>\n\n\n
Will this block real visitors?<\/h3><\/dt>\n
Does this replace Google Ads conversion tracking?<\/h3><\/dt>\n
I already have Google Tag Manager. Should I use the built-in snippets?<\/h3><\/dt>\n
click_guardian_can_track()<\/code> instead.<\/p><\/dd>\nWhat does single-use mode do?<\/h3><\/dt>\n
Do I need Cloudflare?<\/h3><\/dt>\n
Will my own clicks be recorded while I test?<\/h3><\/dt>\n
Can I try it without affecting visitors?<\/h3><\/dt>\n
Can my agency see the reports without being an administrator?<\/h3><\/dt>\n
Does it make my site slower?<\/h3><\/dt>\n
1.0.2<\/h4>\n\n
\n
wp_enqueue_script()<\/code> instead of printed <script><\/code> tags.<\/li>\ntemplate_redirect<\/code> so it never closes a buffer opened by another plugin or the theme.<\/li>\n1.0.1<\/h4>\n\n
\n
init<\/code>.<\/li>\n$wpdb->prepare()<\/code>'s %i<\/code> identifier placeholder instead of raw string interpolation.<\/li>\n<\/ul>\n\n1.0.0<\/h4>\n\n
\n