Veekay Captcha Shield

开发者	vkuberan
更新时间	2026年9月28日 02:42
PHP版本:	8.1 及以上
WordPress版本:	7.1
版权:	GPL-3.0-or-later
版权网址:	版权信息

下载

1.0.0

详情介绍:

Veekay Captcha Shield protects selected WordPress and WooCommerce forms using configurable CAPTCHA providers. Choose a global default provider, then optionally use a different provider for individual forms or disable CAPTCHA for specific forms. Supported providers

Cloudflare Turnstile — Managed, Non-Interactive, Invisible
Google reCAPTCHA Enterprise — Score-based, Checkbox, Invisible
hCaptcha — Checkbox, Invisible

Supported WordPress forms

Login
Registration
Lost password
Comments

Supported WooCommerce forms

Login
Registration
Lost password
Product reviews
Classic checkout
Checkout Block

WooCommerce is optional. WordPress form protection remains available when WooCommerce is not active. WooCommerce 10.1.0 or newer is required when WooCommerce protection is used. Configuration Veekay Captcha Shield provides one settings page under Settings → Veekay Captcha Shield. The General tab lets you:

choose a global default provider;
use the global default for individual forms;
select a different provider for an individual form;
disable CAPTCHA globally or for an individual form.

Separate settings tabs are available for Cloudflare Turnstile, Google reCAPTCHA Enterprise, and hCaptcha. The Status tab compares the current PHP, WordPress, and WooCommerce versions with the minimum versions supported by Veekay Captcha Shield. Security and verification

CAPTCHA verification is performed server-side.
Protected forms fail closed when required verification cannot be completed.
Submitted CAPTCHA tokens are treated as untrusted input and are not stored.
Provider secret credentials remain server-side.
Raw provider errors, tokens, credentials, and complete provider responses are not exposed to visitors.
Only the effective CAPTCHA provider is loaded for a protected form.

Documentation Detailed setup, provider configuration, form guides, and troubleshooting documentation: https://velukuberan.github.io/veekay-captcha-shield/ Project source and technical documentation: https://github.com/velukuberan/veekay-captcha-shield

安装:

Install Veekay Captcha Shield from Plugins → Add New, or upload the plugin ZIP package using Plugins → Add New → Upload Plugin.
Activate Veekay Captcha Shield.
Go to Settings → Veekay Captcha Shield.
Configure the credentials for at least one CAPTCHA provider.
On the General tab, select the provider you want to use as the global default.
Optionally override or disable CAPTCHA for individual WordPress or WooCommerce forms.
Test the protected forms on your site before relying on them in production.

Provider setup Cloudflare Turnstile: https://dash.cloudflare.com/?to=/:account/turnstile Google reCAPTCHA Enterprise: https://cloud.google.com/security/products/recaptcha hCaptcha: https://www.hcaptcha.com/ Detailed setup guides are available at: https://velukuberan.github.io/veekay-captcha-shield/

屏幕截图:

升级注意事项:

1.0.0 First stable release with WordPress and WooCommerce CAPTCHA protection, including Classic Checkout and Checkout Block. 0.1.0-beta1 Initial public beta.

常见问题:

Which CAPTCHA providers are supported?

Veekay Captcha Shield supports Cloudflare Turnstile, Google reCAPTCHA Enterprise, and hCaptcha. Cloudflare Turnstile supports Managed, Non-Interactive, and Invisible modes. Google reCAPTCHA Enterprise supports Score-based, Checkbox, and Invisible modes. hCaptcha supports Checkbox and Invisible display modes.

Which provider should I use?

The best provider depends on your requirements. Cloudflare Turnstile supports Managed, Non-Interactive, and Invisible modes, with Managed as the default mode in Veekay Captcha Shield. Google reCAPTCHA Enterprise supports Score-based, Checkbox, and Invisible modes using Google Cloud reCAPTCHA assessments. hCaptcha provides Checkbox and Invisible display modes. You can also use different providers for different forms.

Can I use multiple providers at the same time?

Yes. You choose one global default provider, but each supported form can use the global default, select a different provider, or disable CAPTCHA. Only the provider configured for a particular protected form is used for that form.

Does this plugin work without WooCommerce?

Yes. WooCommerce is optional. WordPress login, registration, lost password, and comment protection remain available when WooCommerce is not installed or active.

Which WooCommerce versions are supported?

WooCommerce 10.1.0 or newer is required for WooCommerce protection.

Does this plugin support WooCommerce Classic Checkout?

Yes. Veekay Captcha Shield integrates with the traditional WooCommerce Classic Checkout flow and preserves CAPTCHA protection when WooCommerce updates checkout content through AJAX.

Does this plugin support WooCommerce Checkout Block?

Yes. Veekay Captcha Shield supports WooCommerce Checkout Block using the Store API checkout flow. CAPTCHA token data is passed through WooCommerce checkout extension data and verified server-side before checkout completes. Classic Checkout and Checkout Block use the same WooCommerce checkout CAPTCHA setting.

Are WooCommerce product reviews the same setting as WordPress comments?

No. WooCommerce product reviews are independently configurable from WordPress comments.

Does this plugin store submitted CAPTCHA tokens?

No. CAPTCHA tokens are used for provider verification and are not persisted by Veekay Captcha Shield.

What happens if the CAPTCHA provider cannot be reached?

Protected forms fail closed when required verification cannot be completed. Visitors receive a plugin-owned message asking them to try again. Raw provider errors and technical responses are not exposed.

Does deactivating the plugin remove my settings?

No. Deactivating Veekay Captcha Shield preserves its settings, credentials, global default, per-form overrides, and provider configuration.

Does uninstalling the plugin remove my settings?

Yes. Uninstalling Veekay Captcha Shield permanently removes plugin-owned data, including credentials, global defaults, per-form settings, provider settings, transients, and caches. Uninstallation does not contact external CAPTCHA providers or revoke credentials stored with those providers.

Does Veekay Captcha Shield use external services?

Yes. CAPTCHA protection depends on the external provider selected for a protected form. When a provider is enabled, its official browser-side CAPTCHA service may be loaded on pages containing a protected form. When the form is submitted, CAPTCHA verification data is sent to that provider for server-side verification. See the External services section below for details.

Where can I find detailed setup instructions?

User documentation is available at: https://velukuberan.github.io/veekay-captcha-shield/

更新日志: