SecureGate Captcha Lite
| 开发者 | sabbir37 |
|---|---|
| 更新时间 | 2026年1月18日 02:29 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 6.9 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
SecureGate Captcha Lite is a high-performance security suite built to safeguard your WordPress site from intrusive spam, malicious bots, and brute-force attacks. Leveraging professional-grade tools like Cloudflare Turnstile alongside our unique Math and Character CAPTCHA fallback system, we ensure your site remains impenetrable while maintaining a seamless, privacy-first experience for legitimate users.
Protect Your Store - Upgrade to Pro Now
Why Choose SecureGate Captcha Lite?
Complete Protection
Secure all critical WordPress forms including admin login, user registration, password reset, and comment submissions. Each form can be individually enabled or disabled based on your needs.
Privacy-First Approach
Built with GDPR compliance in mind. Uses Cloudflare Turnstile for privacy-focused bot detection and includes a self-hosted fallback CAPTCHA that requires zero external API connections.
Lightning Fast Performance
Optimized code that loads only when needed. No bloat, no unnecessary requests, and fully compatible with all major caching plugins to ensure your site remains fast.
Smart Rate Limiting
Intelligent rate limiting prevents brute-force attacks by tracking failed login attempts and automatically locking out suspicious IP addresses temporarily.
Easy to Configure
Intuitive admin interface with clear settings for CAPTCHA providers, protected forms, and security rules. Get started in minutes with sensible defaults.
Core Features
CAPTCHA Providers
- Cloudflare Turnstile - Modern, privacy-focused CAPTCHA with excellent UX
- Free forever with generous limits
- Invisible verification for most users
- No user frustration with image puzzles
- Privacy-compliant (no cookies or tracking)
- Easy API key setup
- Built-in Fallback CAPTCHA - Self-hosted protection that works always
- Math challenges (simple arithmetic)
- Warped text recognition challenges
- No external dependencies or API keys
- GDPR compliant by design
- Perfect for restricted networks
- WordPress Login - Protect admin and frontend login forms from credential stuffing
- User Registration - Stop spam bot registrations instantly
- Password Reset - Prevent password reset abuse and email flooding
- Comment Forms - Block spam comments without moderation queues
- Rate Limiting - Configure maximum failed attempts before temporary lockout
- Automatic IP Blocking - Temporary bans for suspicious IPs based on behavior
- Customizable Thresholds - Set your own limits for attempts and lockout duration
- Admin Exemptions - Administrators are automatically exempt to prevent lockouts
- IP Allowlisting - Bypass CAPTCHA for trusted IP addresses
- GDPR Ready - Anonymized IP logging with automatic expiration
- Data Minimization - Only essential data is stored as transients
- 7-Day Auto-Cleanup - All logs automatically deleted after 7 days
- No External Tracking - Built-in CAPTCHA requires no third-party services
- User Control - Administrators can disable all logging if desired
- Conditional Loading - Scripts load only on protected pages
- Zero Impact - No performance degradation on unprotected pages
- Cache Friendly - Works seamlessly with WP Rocket, W3 Total Cache, LiteSpeed Cache
- Lightweight Assets - Optimized CSS and JavaScript for minimal footprint
- Database Efficiency - Uses WordPress transients instead of permanent database rows
- Bloggers - Protect comments from spam without moderation
- Membership Sites - Secure registration and login processes
- Business Websites - Prevent fake registrations and form abuse
- Personal Blogs - Simple setup with powerful protection
- Portfolio Sites - Keep contact forms and comments spam-free
- WordPress Version: 5.8 or higher
- PHP Version: 7.4 or higher (PHP 8.0+ recommended)
- Multisite Compatible: Yes
- Translation Ready: Yes (with .pot file included)
- Performance Impact: Negligible (loads only on protected forms)
- Browser Support: All modern browsers (Chrome, Firefox, Safari, Edge)
- Math Challenges: Simple arithmetic problems (e.g., "What is 7 + 3?")
- Text Recognition: Warped text characters requiring human recognition Both are effective against automated bots while remaining accessible to humans.
- Multiple provider support with automatic fallback
- Self-hosted option for complete independence
- Advanced rate limiting built-in
- Modern, user-friendly admin interface
- Regular updates and active development
- Clean, well-documented code
安装:
Automatic Installation (Recommended)
- Navigate to Plugins > Add New in your WordPress dashboard
- Search for "SecureGate Captcha Lite"
- Click Install Now on the SecureGate Captcha Lite plugin
- Click Activate once installation completes
- Go to SecureGate > General Settings to configure
- Download the plugin ZIP file from WordPress.org
- Navigate to Plugins > Add New in your WordPress dashboard
- Click Upload Plugin at the top of the page
- Choose the downloaded ZIP file and click Install Now
- Click Activate Plugin after installation
- Go to SecureGate > General Settings to configure
- Visit Cloudflare Turnstile
- Create a free account if you don't have one
- Add your site and obtain Site Key and Secret Key
- Navigate to SecureGate > Providers in WordPress
- Select "Cloudflare Turnstile" as your provider
- Enter your Site Key and Secret Key
- Save changes For Built-in CAPTCHA:
- Navigate to SecureGate > Providers
- Select "Built-in" as your provider
- Choose "Math" or "Text" challenge type
- Save changes (no API keys needed!) Enable Protected Forms:
- Go to SecureGate > Protected Forms
- Toggle on the forms you want to protect
- Save changes
屏幕截图:
常见问题:
Is this plugin completely free?
Yes! SecureGate Captcha Lite is 100% free with no hidden costs, premium upsells within the plugin interface, or feature limitations beyond what is advertised. All core features for WordPress form protection are included.
Do I need API keys to use this plugin?
It depends on your chosen provider:
- Built-in CAPTCHA: No API keys required - works immediately
- Cloudflare Turnstile: Free API keys required (takes 2 minutes to obtain)
Will this slow down my website?
No. The plugin is performance-optimized and only loads necessary scripts on pages with protected forms. On unprotected pages, there is zero performance impact.
Is it GDPR compliant?
Yes. The plugin is designed with privacy in mind:
- IP addresses are anonymized before storage
- All logs expire automatically after 7 days
- No user personal data is collected or stored
- Built-in CAPTCHA requires no external services
Can I use this with caching plugins?
Absolutely! SecureGate Captcha Lite is fully compatible with all major caching solutions including:
- WP Rocket
- W3 Total Cache
- LiteSpeed Cache
- WP Super Cache
- Autoptimize
- And more...
What happens if Cloudflare Turnstile is down?
The plugin includes intelligent fallback logic. If Turnstile fails to load or verify, the system automatically falls back to the built-in CAPTCHA, ensuring your forms remain protected at all times.
Will administrators be locked out?
No. Administrators (users with 'manage_options' capability) are automatically exempt from CAPTCHA challenges to prevent accidental lockouts during configuration or emergencies.
Can I customize the appearance?
Yes! The plugin includes theme options for CAPTCHA widgets (Light/Dark mode) and uses WordPress-standard styling that inherits your theme's design. Custom CSS can be added for advanced styling needs.
Does it work on multisite installations?
Yes. The plugin is multisite-compatible and can be network-activated or activated individually per site.
How long are blocked IPs banned?
By default, IPs are temporarily blocked for 30 minutes after exceeding the failed attempt threshold. This duration is customizable in SecureGate > Security Rules.
Can I whitelist specific IP addresses?
Yes. Navigate to SecureGate > Security Rules to add trusted IP addresses that will bypass CAPTCHA verification.
Is there a Pro version?
Yes! SecureGate Captcha Pro is the ultimate security solution for WooCommerce and WordPress stores. While the Lite version provides essential protection, the Pro version is designed for serious businesses that need advanced defense against sophisticated bot attacks and localized threats. Get SecureGate Captcha Pro Why SecureGate Pro is the Best Solution for Your Store:
- Google reCAPTCHA v2 & v3 Integration: Use the world's most trusted CAPTCHA technology. v3 offers 100% invisible protection without interrupting the user experience.
- Enterprise-Grade hCaptcha Support: Advanced bot detection with privacy-focused hCaptcha enterprise features.
- Comprehensive WooCommerce Protection: Secure every step of the customer journey, from account creation and login to the final checkout process.
- Geographic (Geo-Location) Blocking: Stop attacks before they reach your server by blocking entire countries or regions known for high bot activity.
- Advanced Analytics & Reporting: Gain deep insights into security threats with real-time charts, provider popularity data, and CSV export capabilities.
- Smart IP Filtering: Advanced IP address blocking and allowlisting to fine-tune your security rules.
- Priority Expert Support: Get direct access to our security experts for fast resolution of any issues.
How do I report bugs or request features?
Please use the WordPress.org support forum for bug reports and feature requests. We actively monitor and respond to all threads.
Can I contribute to development?
Yes! We welcome contributions. Please visit our GitHub repository (link in plugin header) to submit pull requests or report issues.
更新日志:
1.0.1 - 2026-01-18
- Improved: Plugin information and functionality refinements
- Initial Public Release
- Added Cloudflare Turnstile support
- Added Built-in Fallback CAPTCHA (Math & Text)
- Implemented WordPress Core form protection (Login, Registration, Password Reset, Comments)
- Added Rate Limiting with customizable thresholds
- Implemented Automatic IP blocking for suspicious activity
- Added IP Allowlist functionality
- Included GDPR-compliant logging with auto-expiration
- Created modern admin interface with tabbed navigation
- Implemented real-time settings validation
- Added comprehensive error handling
- Included multisite compatibility
- Added translation readiness with .pot file