Captcha Security

2.4k visualizações Markdown

Captcha Security decides which forms always show a captcha to visitors, which provider answers it, and works together with BotShield's automatic protection.

Opening the Screen

It opens from Settings › Security. On the tab strip at the top of the page, select the Captcha Security tab: {admin}/settings/security?general=captcha

What Is on the Screen

An info banner explains how this screen works with BotShield. With Always Mode on, set a form to Always and every visitor sees a captcha on it. Leave a form Adaptive and no captcha appears on its own. BotShield shows one to a visitor who keeps retrying that form, provided its protection is on for that form.

Always Mode Decides whether the forms set to Always show their captcha. Off, no form shows a captcha on its own and the form list is locked. The provider and its keys stay editable either way. In 5.0-beta.3 and earlier this switch is named Captcha Status. There it also locks the provider and its keys.

Provider A card for each installed captcha service. Only one can be active at a time; picking a card that needs keys opens a small settings panel underneath it. BotShield also shows its captcha through this provider, so it stays selectable while Always Mode is off. While Always Mode is off, a note under the cards says whether BotShield protection is on.

Protected Forms Every guest-facing form and lookup, grouped by area (account, forms, lookups), each with its own Adaptive / Always switch and a note on what that switch currently does.

Provider readiness badges

Each provider card carries one of three badges. Built In needs no setup. Keys Required means the provider is chosen but its settings panel still has an empty field. Ready means every field is filled and the provider can be used. Leaving Site Key or Secret Key empty on the chosen provider blocks the save, whether Always Mode is on or off. The save is rejected with an error and nothing is written, so fill the keys in first. In 5.0-beta.3 and earlier the keys are checked only while Captcha Status is on.

Fields

Always Mode Off by default. Decides whether the forms set to Always show their captcha; it does not lock the provider or its keys.

Captcha Type The active provider: the built-in captcha, Cloudflare Turnstile, hCaptcha, or Google reCAPTCHA v3.

Adaptive / Always Set on each form row. Always shows a captcha to every visitor before the form can be sent; Adaptive leaves the decision to BotShield.

Tasks

Choose a provider

Click a provider card. If it needs keys, fill in the fields in the panel that opens underneath it.
Click Save Changes. The card counts as Ready once its keys are filled, and BotShield shows its captcha through this provider from then on.

Show a captcha on a form every time

Switch on Always Mode at the top of the tab.
Find the form in the Protected Forms list.
Switch its control from Adaptive to Always.
Click Save Changes. Every visitor now sees a captcha on that form before it can be sent.

Things to Watch

An Adaptive form with BotShield off stays unguarded

Adaptive only works because BotShield is watching that form. If BotShield's threshold for that form is 0, the form shows no captcha at all until you switch it to Always or raise the threshold on the BotShield tab.

Switching providers keeps the old keys

Moving Captcha Type to a different provider does not clear the keys you entered for the one you leave. Switching back restores it without retyping anything.

Always Mode off does not stop BotShield's captcha

BotShield keeps showing its captcha through the chosen provider while Always Mode is off. Switching Always Mode off does not clear the provider or its keys.

Required Privileges

Opening the tab and saving changes need SECURITY_SETTINGS.

Foi útil?

Obrigado pela sua opinião!

Ainda precisa de ajuda?

A nossa equipa de apoio está disponível a qualquer hora para ajudar com o que não encontrar acima.

Contactar-nos Abrir pedido de suporte