Posted in php
10944
12:45 am, June 25, 2021
 

verify the google recapture server php

i was still getting quite a bit of spam even after using google recapture v2 and i think this is just as i was using the javascript only version, which disables the submit button if the capture is not solved.

the issue with this is all you need to do is disable javascript and you can still submit the form, so it needs some server side verification to check that the capture is actually solved.

I added this code to the post back on the form to send a check back to google which verifies the capture is solved

I also found that this cases the form to take a while to submit, so it needs some intervention from jquery. As when the form is submitted it has to wait to get the response from google. When its submitted you have to hide the submit button on the form and replace it with a disabled button that has please wait on it. 

here is a demo of its functionality

 

verify google recapture

HTML

<form id="subform" method="post">
	<button type="submit" class="btn btn-success" id="commentButton" disabled="disabled">Register</button>
  	<button class="btn btn-primary hide" disabled="disabled" id="pleaseWait">Please Wait...</button>
</form>

Javascript

$(document).ready(function(){ 
	/* hide submit buttons on form clicks */
		$('#subform').on('submit', function(evt) {
				$('#commentButton').hide();
				$('#pleaseWait').show();
		});
  });

PHP

if($_SERVER['REQUEST_METHOD']=="POST") {

// check google recp auth
  $bad_google_cap = "<p class='alert alert-warning'>Recapture Failed</p>";
  if(isset($_POST['g-recaptcha-response'])) {
    $cap_response = $_POST['g-recaptcha-response'];
  } else {
    $page_content .= $bad_google_cap;
    return;
  }
  $google_response = file_get_contents("https://www.google.com/recaptcha/api/siteverify?secret=____your_secret_key_____&response=".$cap_response."&remoteip=".$_SERVER['REMOTE_ADDR']);
  $google_response_decoded = json_decode($google_response);
  if(!$google_response_decoded->success === true) {
    $page_content .= $bad_google_cap;
    return;
  }
  // check google recp auth
}

View Statistics
This Week
408
This Month
1691
This Year
3347

No Items Found.

Add Comment
Type in a Nick Name here
 
Other Items in php
php redirect echo the page id from wordpress sqlite escape string Deprecated: parse_str(): Calling parse_str() without the result argument is deprecated getcwd usage in php to get the current working directory for file includes write to file php save string to file php using preg_match to extract text from elements encode spaces in items passed to url to %20 not + php function load as table - load_as_table turn on or off error reporting php get json with php from a url and display it php convert number with k on the end to full number extract variables from url string php No 'Access-Control-Allow-Origin' header is present on the requested resource. Fatal error: Uncaught Exception: Required extension GD is not loaded. php check if a class exists Uncaught Error: Call to undefined function mb_convert_encoding() get the subdomain name from the domain string in php - sub domain fixing error Call to undefined function simplexml_load_string get the content of a url get the content of a link with php and test if the result is empty php check if url is valid with filter_var php save csv from array to file php export csv from string to browser download convert json string to a php array how to json encode an array in php how to decode xml in php php get file and save it php function to remove the query string from a url using php parse_url function to remove the query string from a url add every value in the load_array array into the out for testing Fix for PHP Warning Trying to get property '*name*' of non-object write the contents of a url into a file with php sqlite fetchArray into another array php return json header and content list_all_array an early stages of list all function that uses an array to pass in main variables replace singular variable assignment with an array loop and variable variables using the $_SERVER['HTTP_REFERER'] to check referring pages timeline class and function php html template class system views list function for checking what views have been made on the current week load array load all items from an array while in a sqlite load sql loop create a 200 character summary from a longer html string using strlen to check the length of a string and do something about it How to record your own page views with PHP, and make them into weekly monthly and yearly charts load from fields array php class function get the current week as a number with php creating embedded php code from a database field test php bundle write check if a file exists with php
Related Search Terms
Search Code
Search Code by entering your search text above.
Welcome

This is my test area for webdev. I keep a collection of code here, mostly for my reference. Also if i find a good link, i usually add it here and then forget about it. more...

Subscribe to weekly updates about things i have added to the site or thought interesting during the last week.

You could also follow me on twitter or not... does anyone even use twitter anymore?

If you found something useful or like my work, you can buy me a coffee here. Mmm Coffee. ☕

❤️👩‍💻🎮

🪦 2000 - 16 Oct 2022 - Boots
Random Quote
therock Somewhere along this crazy road I learned (often times the hard way) the most important things I can do is be authentic, trust my gut, be the hardest worker in the room, celebrate the mistakes, be a grateful man and always remember that it's nice to be important, but it's more important to be nice.
The Rock
Random CSS Property

negative

When defining custom counter styles, the negative descriptor lets you alter the representations of negative counter values, by providing a way to specify symbols to be appended or prepended to the counter representation when the value is negative.
negative (@counter-style) css reference