Manual Blocking

Manual Blocking in Ultimate Spin Wheel

Automated defences such as the disposable-email blocker handle most abuse on their own. But sometimes you need a scalpel instead of a sledgehammer: a specific repeat offender who keeps gaming your wheel. That is what Manual Blocking is for. From Global Settings → Security you can permanently block a visitor by their IP address or Device ID, and a blocked visitor can no longer see or spin any of your wheels.

What the code actually blocks by:

• IP address — add an IP to the block list and every request from it is turned away (free).
• Device ID — a browser fingerprint that follows a visitor even if they change IP. Device fingerprinting is a (Pro) capability, so real Device IDs are only captured with Ultimate Spin Wheel Pro.

Important: There is no email blacklist, email-domain blocklist, or wildcard-pattern (*@example.com) blocking in the plugin. Blocking is done purely by IP and Device ID. To stop throwaway email providers, use the separate Disposable Email Blocking toggle described below.

Manually Blocking an IP Address

Use this when you have already spotted an abusive IP and want to add it by hand.

1. Go to Global Settings → Security.
2. In the Manually Block IP box, type the IP address (for example 192.168.1.1). Both IPv4 and IPv6 addresses are accepted; the field validates the format before it lets you add it.
3. Click Block IP. The address appears in the Blocked IP Addresses list.
4. Click Save to persist the change. Blocked visitors will no longer see or interact with any spin wheel.

When a blocked visitor tries to spin, the server rejects the request with the message “Your access has been restricted.” On normal page loads the wheel simply does not render for them at all.

Blocking Straight From the Leads Dashboard

The fastest way to shut down a “gamer” — someone clearing cookies to spin again under different names — is to block them directly from the entry they left behind.

1. Open the Leads (Entries) dashboard and find the suspicious entry.
2. Click the Block IP/Device action on that row.
3. Confirm. This blocks both the visitor’s IP address and their Device ID in one step, so they can no longer spin any wheel — even if they change IP (Device ID is Pro).

The blocked IP and Device ID then show up in the Blocked IP Addresses and Blocked Device IDs lists on the Security screen, where you can review or remove them.

Unblocking

Mistakes happen, and recovery is instant.

1. On the Security screen, find the entry in the Blocked IP Addresses or Blocked Device IDs list.
2. Hover the row and click the trash icon.
3. Confirm the unblock. Access is restored right away.

Disposable Email Blocking (Free)

Separate from manual blocking, the Security screen includes a Disposable Email Blocking toggle. When it is enabled, the plugin checks each submitted email against a built-in list of known temporary and throwaway email providers and rejects any match. This runs in the free version.

• It uses a maintained internal domain list — you do not type domains yourself, and it is not a custom blacklist or wildcard system.
• You can set a custom message that a rejected visitor sees.
• Leave it off if you do not want any email-provider filtering.

Frequently Asked Questions

Can I block a specific email address or an entire email domain?

No. The plugin does not have an email blacklist or email-domain blocklist. Blocking is done by IP address and Device ID only. For throwaway providers, enable Disposable Email Blocking, which filters against a built-in list.

Do wildcard patterns like *@mail.ru work?

No. There is no wildcard or pattern matching for blocking. This is a common misconception — the block lists hold exact IP addresses and exact Device IDs.

How many IPs or devices can I block?

There is no hard limit. Each block check is a simple list lookup, so normal-sized lists have no meaningful effect on spin performance.

Is a block permanent?

Yes, it stays in effect until you manually remove it from the Blocked IP Addresses or Blocked Device IDs list.

Can I block someone by the name they entered?

No. There is no name-based blocking — only IP address and Device ID.

Related Documentation

• Global Settings: Overview of the plugin-wide Security, General, and email settings.
• Win Probabilities: How the secure server-side draw prevents wheel tampering.

Conclusion

Manual Blocking is your fallback for targeted abuse: block an offender by IP or Device ID, either by typing an IP on the Security screen or with one click from the Leads dashboard, and undo it instantly if you make a mistake. Pair it with Disposable Email Blocking for automated coverage. If you need help, visit the wowDevs support center.