Really Simple CAPTCHA vs Simple CAPTCHA with Cloudflare Turnstile

Really Simple CAPTCHA does not work alone and is intended to work with other plugins. It is originally created for Contact Form 7, however, you can use it with your own plugin. Note: This product is “really simple” as its name suggests, i.e., it is not strongly secure. If you need perfect security, you should try other solutions. How does it work? Really Simple CAPTCHA does not use PHP “Sessions” for storing states, unlike many other PHP CAPTCHA solutions, but stores them as temporary files. This allows you to embed it into WordPress without worrying about conflicts. When you generate a CAPTCHA, Really Simple CAPTCHA creates two files for it; one is an image file of CAPTCHA, and the other is a text file which stores the correct answer to the CAPTCHA. The two files have the same (random) prefix in their file names, for example, “a7hk3ux8p.png” and “a7hk3ux8p.txt.” In this case, for example, when the respondent answers “K5GF” as an answer to the “a7hk3ux8p.png” image, then Really Simple CAPTCHA calculates hash of “K5GF” and tests it against the hash stored in the “a7hk3ux8p.txt” file. If the two match, the answer is confirmed as correct. How to use with your plugin Note: Below are instructions for plugin developers. First, create an instance of ReallySimpleCaptcha class: $captcha_instance = new ReallySimpleCaptcha(); You can change the instance variables as you wish. // Change the background color of CAPTCHA image to black $captcha_instance->bg = array( 0, 0, 0 ); See really-simple-captcha.php if you are interested in other variables. Generate a random word for CAPTCHA. $word = $captcha_instance->generate_random_word(); Generate an image file and a corresponding text file in the temporary directory. $prefix = wp_rand(); $captcha_instance->generate_image( $prefix, $word ); Then, show the image and get an answer from respondent. Check the correctness of the answer. $correct = $captcha_instance->check( $prefix, $the_answer_from_respondent ); If the $correct is true, go ahead. Otherwise, block the respondent — as it would appear not to be human. And last, remove the temporary image and text files, as they are no longer in use. $captcha_instance->remove( $prefix ); That’s all. If you wish to see a live sample of this, you can try Contact Form 7.

Easily add Cloudflare Turnstile to all your WordPress website forms to protect them from spam! A user-friendly, privacy-preserving reCAPTCHA alternative. 100% free! Supported Forms You can currently enable Turnstile on the following forms: WordPress Login Form Registration Form Password Reset Form Comments Form WooCommerce Checkout Pay For Order Account Details Form Login Form Registration Form Password Reset Form Form Plugins WPForms Fluent Forms Contact Form 7 Gravity Forms Formidable Forms Forminator Forms Jetpack Forms Kadence Forms SureForms Other Integrations Elementor Pro Forms Easy Digital Downloads Forms Paid Memberships Pro Forms Mailchimp for WordPress Forms MailPoet Forms BuddyPress Registration Form bbPress Create Topic & Reply Forms MemberPress Forms Ultimate Member Forms WP-Members Forms WP User Frontend Forms WP User Manager Forms wpDiscuz Comments Form CheckoutWC & Flux Checkout Sunshine Photo Cart This plugin is also compatible with WordPress Multisite, and most two-factor authentication (2FA) plugins. Other Features The plugin includes several other features and options: Theme: Select the default theme for Turnstile. Language: Set the default language for Turnstile. Appearance Mode: Choose if Turnstile is always displayed, or only when an interaction is required. Disable Submit Button: Disable the submit button on forms until the Turnstile challenge is completed. Custom Error Message: Set your own custom error message for failed submissions. Whitelist: Prevent Turnstile from showing for logged in users, or certain IP addresses (wildcards are not supported). Resource Hint (Preconnect): Option to enable resource hint preconnect for improved performance. Failsafe Mode: Option to enable failsafe mode. When Cloudflare is down, this mode will either allow submissions, or fallback to reCAPTCHA. Debug Logging: Enable debug logging of Turnstile form submission events to help with troubleshooting. Getting Started It’s super quick and easy to get started with Cloudflare Turnstile! Simply generate a “site key” and “secret key” in your Cloudflare account, and add these in the plugin settings page. Select which forms Turnstile should be added to and click save. Finally, click the “TEST API RESPONSE” button to make sure the Turnstile API response is working OK. A new Cloudflare Turnstile challenge will then be displayed on your selected forms to protect them from spam! For more detailed instructions, please see our setup guide. What is Cloudflare Turnstile? Cloudflare Turnstile delivers frustration-free, CAPTCHA-free web experiences to website visitors. Turnstile is an anti-spam filter that stops abuse and confirms visitors are real without the data privacy concerns or awful UX that CAPTCHA thrusts on users. Learn more here: https://www.cloudflare.com/en-gb/products/turnstile/ Is it free to use? Yes, this plugin is completely free with no paid version, and does not include any additional data tracking. Cloudflare Turnstile is also a completely free service. Plugin Languages Currently available in 14 languages. Thank you to all the contributers! If you would like to help contribute translations, please click here. Other Information For help & suggestions, please create a support topic. Follow the developer @ElliotSowersby on Twitter. View on GitHub Support The Plugin If you would like to support the continued development and support of this plugin, you can make a donation. Trademark Notice Cloudflare, the Cloudflare logo, and Cloudflare Workers are trademarks and/or registered trademarks of Cloudflare, Inc. in the United States and other jurisdictions. This plugin is not affiliated with, endorsed, or sponsored by Cloudflare, Inc.