How easy would it be to implement Cloudflare Turnstile free Captcha?

[the.rampage.rado]

Currently I don't have problems in my BO, but I can imagine this would solve quite a lot bruteforce attacks for the community. I'm testing your module now and left the TB captcha only for the BO.

Regarding the second question I did some testing and "invisible" is defintely not very user friendly as of now, I tested and managed to input a proper email in the registration option before the checks pass and this is failing when user clicks the button.

I believe this option should be preffered if they speed up those checks in future.

As of now I belive that the most user friendly option is "non-interactive" as it shows a notification that something is working in the background and should be waited for but does not require any interaction.

[30knees]

9 hours ago, the.rampage.rado said:

As of now I belive that the most user friendly option is "non-interactive" as it shows a notification that something is working in the background and should be waited for but does not require any interaction.

Why not managed?

[the.rampage.rado]

2 hours ago, 30knees said:

Why not managed?

It was showing me the checkbox during all my tests.

[wakabayashi]

Thanks to @datakick, who submitted a PR and improved some minor issues!

In general this module works great for me to block spam. Personally I have none at all, right now. So it was time to make an official release of v.1.0.0.

https://github.com/eschiendorfer/genzo_turnstile/releases/tag/v.1.0.0 

[the.rampage.rado]

@wakabayashi thank you! Any plans to implement this for BO login as we discussed before?

[datakick]

49 minutes ago, the.rampage.rado said:

@wakabayashi thank you! Any plans to implement this for BO login as we discussed before?

I'm afraid this is not easily doable, as back office login is performed by ajax call. That would probably require template override.

[DRMasterChief]

@wakabayashi a few months are gone now....  how is your experience?  is it still 'no spam' ? 

I use Google module right now,  but shop is not live until now.   I am urgently looking for another captcha that is data protection compliant.  (is yours/Cloudflare´s ?)

I found this too, looks very good and conform with GDPR, so it would be nice for the EU countries but needs an Dev to bring it to thirtybees:   https://friendlycaptcha.com/#developers

Edited April 25 by DRMasterChief

[wakabayashi]

Yeah no spam at all. But honestly I have also implemented a new theme and 99% autospammers aren't been able to even reacht the contact form. The form is just loaded by ajax that helps a lot. But yeah turnstile does a good job as well.

15 hours ago, DRMasterChief said:

I use Google module right now,  but shop is not live until now.   I am urgently looking for another captcha that is data protection compliant.  (is yours/Cloudflare´s ?)

No idea. They say so 🤷‍♂️

15 hours ago, DRMasterChief said:

I found this too, looks very good and conform with GDPR, so it would be nice for the EU countries but needs an Dev to bring it to thirtybees:   https://friendlycaptcha.com/#developers

Oh ok, cool. But I surely won't integrate this, as my spam problem is completly gone 🤩

[DRMasterChief]

thanks for feedback,  i will try yours (with Turnstile),  seems to be better, grab not that much than Google´s and Turnstile had some GDPR advantages compared to Google.

[30knees]

I've not had any spam since using Turnstile. It's great!

[Rhapsody]

On 6/5/2023 at 5:41 AM, 30knees said:

explode(): Passing null to parameter #2 ($string) of type string is deprecated    modules/genzo_turnstile/genzo_turnstile.php:227 

@wakabayashi - similar to 30knees I am seeing the same error log entries. It appears to be generated both when logging in and logging out.  I have toggled all the configuration settings and saved them to see if that helps.  It still creates the error log.  Any ideas?

[wakabayashi]

I should update this module. Atm I just don't find enough time. Hopefully I can do it next weeks.

In general this entry is not all problematic.

Edited September 16 by wakabayashi

[wakabayashi]

I plan to make a new release of this module next week. I have made some changes, but they aren't very important for basic usage. It's basically interesting for comments section (when you render multiple turnstile containers). It's also possible to load only on input event (if user types) and not on pageload. That way you save time and don't make unnecessary calls - should be good in seo theory. 

Are there any serious issues or improvements you would need? It would be a good time now, to let me know 😅

[the.rampage.rado]

Admin page login support! 😛 Now I have captcha for BO and your module for FO. I would like to eliminate one of them and I bet you know it's not your module... ahah 🙂

[wakabayashi]

I am still confused about this BO Login request. You are afraid of brutforce attacks, right? But is it a real/do you see attacks? Cause in my case I never noticed such trials.

I can look into it, but datakick said it would need some override, so I am not sure, if I am going to implement it.

[the.rampage.rado]

Yes, prior to installing recaptcha I had some attempts, changed the admin folder and since then I have not noticed any more attempts. But yes, if it's complicated don't bother, there is a working solution so.. 🙂 I like your development ideas!