Linux 软件免费装

在这里免费安装WordPress以及其他软件

Banner图

Empex CAPTCHA for Cloudflare Turnstile

开发者 empexdigital
更新时间 2026年6月29日 02:37
PHP版本: 7.4 及以上
WordPress版本: 7.0
版权: GPLv2 or later
版权网址: 版权信息

标签

captcha spam security cloudflare turnstile

下载

1.0.0

详情介绍:

Empex CAPTCHA for Cloudflare Turnstile adds invisible, privacy-friendly bot protection to every form on your WordPress site using Cloudflare Turnstile. No puzzles. No friction. No CAPTCHAs. Supported Forms Key Features How It Works
  1. Install and activate the plugin
  2. Enter your Cloudflare Turnstile Site Key and Secret Key
  3. Toggle which forms to protect
  4. That's it — bots are blocked, real users pass through invisibly
External Service This plugin connects to the Cloudflare Turnstile service to verify form submissions: When a user submits a form, their browser interaction data, IP address, and browser fingerprint are sent to Cloudflare for verification. This is required for the plugin to function. The plugin itself does not store personal data by default. IP address logging is opt-in and must be explicitly enabled in Settings.

安装:

  1. Upload the empex-cloudflare-turnstile folder to /wp-content/plugins/, or install directly from the WordPress plugin directory.
  2. Activate the plugin through the Plugins menu in WordPress.
  3. Go to Settings → Empex Cloudflare Turnstile.
  4. Enter your Cloudflare Turnstile Site Key and Secret Key (get them from the Cloudflare Dashboard).
  5. Click Verify & Save to confirm your keys work.
  6. Enable protection on the forms you want to protect.
Recommended: Define Keys in wp-config.php For production sites, define your keys as constants in wp-config.php to prevent exposure via the database: define( 'EMPEX_CT_SITE_KEY', 'your-site-key-here' ); define( 'EMPEX_CT_SECRET_KEY', 'your-secret-key-here' );

屏幕截图:

  • Integration toggles — enable protection on 25+ supported form plugins with one click.
  • Log viewer — real-time dashboard showing blocked attempts, pass rates, and form-level stats.
  • WordPress Login form — the Turnstile widget rendering cleanly inside the login form.

升级注意事项:

1.0.0 Initial release. No upgrade action required.

常见问题:

Do I need a Cloudflare account?

Yes. You need a free Cloudflare account to obtain Turnstile API keys. Turnstile itself is free for unlimited use.

Will this slow down my site?

No. The Cloudflare Turnstile script is loaded asynchronously and only on pages with protected forms. The plugin adds less than 5ms to server-side processing.

What happens if Cloudflare is down?

You can configure "Soft-Fail" mode in Settings → Behaviour. In soft-fail mode, form submissions are allowed through (and logged) when Cloudflare is unreachable. In block mode (default), submissions are rejected.

Does this work with page caching?

Yes. The Turnstile widget renders fresh on each page visit regardless of HTML caching. We recommend excluding /wp-admin/admin-ajax.php?action=empex_* from your cache rules.

What if JavaScript is disabled?

The widget won't render and no token will be generated. The server treats this as a missing token and applies your configured fail mode (block or soft-fail).

Is this GDPR compliant?

The plugin itself collects no personal data by default. Cloudflare Turnstile is documented as GDPR-compliant by Cloudflare. IP address logging in the plugin is opt-in. See our privacy policy suggestion in Settings → Privacy.

Can I use this with custom forms?

Yes. Use the [empex_ct_turnstile] shortcode to add a widget to any form. Developers can verify tokens server-side using the empex_ct_verify_shortcode filter.

Does it support multisite?

Yes. The plugin supports both network-wide and per-site activation. Settings are stored per-site.

更新日志:

1.0.0