外掛說明
Mrsoukbh Smart CAPTCHA for Google reCAPTCHA is a lightweight yet powerful plugin to protect your WordPress site from spam and abuse using Google reCAPTCHA v2 or v3.
Features:
– Supports both reCAPTCHA v2 (Checkbox) and v3 (Invisible).
– Integration with:
– Login form
– Registration form
– Comment form
– WooCommerce checkout
– Contact Form 7, WPForms, Gravity Forms (optional)
– Visual chart of failed attempts.
– Security dashboard to monitor plugin health.
– AJAX-based key verification.
– Optional reCAPTCHA v3 badge control.
Third-Party Service Integration
⚠️ IMPORTANT: External Service Usage
This plugin integrates with Google reCAPTCHA service to provide spam protection and bot detection. By using this plugin, you acknowledge that it will communicate with Google’s servers to verify CAPTCHA responses.
What data is sent to Google reCAPTCHA:
– User’s IP address
– Browser fingerprint data (collected by Google’s reCAPTCHA script)
– User interaction patterns (mouse movements, timing, etc.)
– The reCAPTCHA response token generated by user interaction
When data is sent:
– Every time a user submits a form protected by reCAPTCHA
– During key verification checks in the admin panel
– When loading reCAPTCHA scripts on protected pages
Google reCAPTCHA Service Links:
– Terms of Service: https://developers.google.com/terms/
– Privacy Policy: https://policies.google.com/privacy
– reCAPTCHA Terms: https://www.google.com/recaptcha/intro/terms.html
– reCAPTCHA Privacy: https://policies.google.com/privacy#infocollect
Purpose of External Service:
Google reCAPTCHA is essential for distinguishing between human users and automated bots. This service analyzes user behavior patterns and interaction data to determine if form submissions are legitimate. Without this integration, the plugin cannot provide spam protection functionality.
Data Processing:
All data sent to Google is processed according to Google’s privacy policy. No sensitive form data (passwords, personal information) is sent to Google – only the reCAPTCHA response tokens and standard verification data.
User Consent:
By enabling reCAPTCHA on your forms, you are responsible for informing your users about this third-party integration according to your local privacy laws (GDPR, CCPA, etc.).
螢幕擷圖
安裝方式
- Upload the plugin folder to
/wp-content/plugins/. - Activate the plugin via the ‘Plugins’ menu in WordPress.
- Navigate to Settings Mrsoukbh Smart CAPTCHA and enter your Google site and secret keys.
- Choose where to enable reCAPTCHA and save settings.
常見問題集
-
Does it support reCAPTCHA v3?
-
Yes, both v2 and v3 are supported.
-
Are form submissions blocked if reCAPTCHA fails?
-
Yes, failed CAPTCHA attempts are blocked and optionally logged.
-
Where can I view failed attempts?
-
You can view recent failed CAPTCHA attempts via the chart on the plugin dashboard.
-
Does this plugin load scripts from external sources?
-
Yes. reCAPTCHA scripts are loaded directly from Google as required by Google’s API. See “Third-Party Service Integration” section for detailed information.
-
Is user data sent to Google?
-
Yes, Google reCAPTCHA requires sending user interaction data and IP addresses to their servers for verification. This is essential for the spam protection functionality. Please review Google’s privacy policy and ensure compliance with your local privacy laws.
-
How do I get reCAPTCHA keys?
-
Visit https://www.google.com/recaptcha/admin/ to register your site and obtain free site and secret keys.
使用者評論
這個外掛目前沒有任何使用者評論。
參與者及開發者
變更記錄
1.1.3
- ✅ Chart Functionality: Fixed issue with the attempts chart by implementing accurate logging of failed reCAPTCHA attempts.
- ✅ Chart.js Integration: Replaced placeholder with the actual Chart.js v4.5.0 library, bundled locally for full functionality.
1.1.2
- ✅ Chart Functionality: Fixed attempts chart by implementing proper logging for failed reCAPTCHA attempts
- ✅ Chart.js Library: Downloaded and included actual Chart.js v4.5.0 library (was placeholder before)
- ✅ Comment Form Integration: Added complete reCAPTCHA integration for WordPress comment forms
- ✅ Enhanced Logging: Added logging to all form validation points (login, WooCommerce, comments)
- ✅ Log Directory: Improved uploads directory handling with better permission checks
- ✅ Text Domain Fix: Corrected text domain to match plugin directory slug ‘mrsoukbh-smart-captcha-for-google-recaptcha’
- ✅ WP_Filesystem: Updated uninstall.php to use WP_Filesystem instead of direct filesystem calls
- ✅ PHPCS Compliance: Fixed all WordPress Coding Standards violations identified in review
- ✅ WordPress.org Review Fixes: Fixed all issues identified during manual plugin review
- ✅ Plugin URI: Updated to use WordPress.org profile URL instead of external link
- ✅ File Structure: Removed log files and logs directory from plugin folder
- ✅ Enqueue Standards: Fixed all inline CSS/JS to use wp_add_inline_style() and wp_add_inline_script()
- ✅ Data Storage: Moved logging to WordPress uploads directory following best practices
- ✅ Text Domain: Updated all instances to match plugin slug ‘mrsoukbh-smart-captcha-for-google-recaptcha’
- ✅ Naming Convention: Fixed generic variable names to use proper plugin-specific prefixes
- ✅ Code Quality: Ensured full compliance with WordPress coding standards and guidelines
1.1.1
- ✅ WordPress.org Compliance Update: Changed plugin name to “Mrsoukbh Smart CAPTCHA for Google reCAPTCHA” to comply with trademark guidelines
- ✅ Security Enhancement: Added ABSPATH protection to all PHP files to prevent direct access
- ✅ Documentation: Added comprehensive third-party service integration documentation
- ✅ Library Update: Updated Chart.js from v4.4.1 to v4.5.0 for security and performance
- ✅ Plugin Structure: Updated plugin slug to
mrsoukbh-smart-captcha-for-google-recaptcha - ✅ Privacy Compliance: Enhanced documentation of data sent to Google reCAPTCHA service
- ✅ Code Quality: Updated text domain and constants to match new naming convention
- ✅ WordPress Standards: Fixed inline CSS/JS to use wp_add_inline_style() and wp_add_inline_script()
- ✅ Data Storage: Moved log files from plugin directory to WordPress uploads directory
- ✅ Naming Convention: Updated all function/variable names to use proper unique prefixes
1.1.0
- ✅ Added full support for reCAPTCHA v3 with invisible badge and score validation.
- ✅ Implemented dynamic Chart.js graph for failed CAPTCHA attempts with animated updates and real-time reloading.
- ✅ Introduced tabbed admin UI with responsive design for better UX.
- ✅ Added AJAX-based key verification with localized nonce security.
- ✅ Improved compatibility with custom themes and login/register pages.
- ✅ Added front-end rendering hooks for WooCommerce custom checkout templates, My Account page, and Contact Form 7, WPForms, Gravity Forms, and BuddyPress.
- ✅ Enforced strong key validation with admin notices for missing/incomplete configuration.
- ✅ Fixed escaping issues and ensured proper use of
esc_html()and nonces across all settings forms. - ✅ Replaced external Chart.js CDN with a locally hosted version to comply with WordPress Plugin Directory rules.
- ✅ Renamed plugin slug and text domain to
mrsoukbh-smart-captcha-for-google-recaptchato match WordPress.org guidelines. - ✅ Improved security and performance of reCAPTCHA token verification.
- ✅ Fixed warning: “Text Domain mismatch” and “Nonce verification missing” in settings sanitization.
- ✅ Fixed file structure and ensured all plugin files pass WordPress Plugin Check and PHPCS scan.
1.0.0
- Initial release.