FriendsOfFlarum reCAPTCHA

peopleinside

Gatsu what version of recaptca are you using?
Also is your domain added correctly in the Google ReCaptcha?

If I'm not wrong is ReCaptcha invisible version 2 to use.
https://www.google.com/recaptcha/admin

Gatsu

peopleinside I use the latest version.

https://ibb.co/VYT7hgG
It set up, always worked before.

peopleinside

Gatsu version V3 maybe not compatible. Please try to use the invisible V2

Gatsu

peopleinside Thank you very much!
With V2 it work! Thanks again.

datitisev

1.3.0

Fix issue if PHP's allow_url_fopen is disabled
Pass errors during reCAPTCHA request to user so it doesn't just say validation failed with no other feedback
Fix reply post validation not properly checking for whether the post is the first in a discussion
[Admin] Add some helper text to explain a bit more about the captcha type
[Admin] Add reCAPTCHA test section that uses current values in input fields

screenshot

giulio

I installed this extension today and while it seems to work fine once it's properly configured, I am a bit concerned about what happens before that. If you enable the extension but haven't configured it properly (or at all), it will prevent you (yes, including the admin) from logging in, so if you close your current session with the extension enabled but not configured, you will be logged out of your forum until you access the database and disable it there. This seems highly undesirable. I think that there should be some sort of conditional check in the backend as to whether the extension is configured properly before it gets fully activated. Perhaps some check that forces it to pass the "test recaptcha" box in the configuration page after every credential change before it gets fully enabled?

zufusion

@datitisev pls check and fix the bug soon
FriendsOfFlarum/recaptcha44

Maizi

When can V3 be supported? You know, using reCAPTCHAV3 can simplify the verification process and further improve the user experience 🇦

Zomphie

Hi. I am using your extension, and it works amazingly, but one issue I see is that the 2-Step also has a check box on it, which starts to become very cumbersome. Would you be willing to remove this from the 2-Step page? We are using the 2FA by IanM.

Thank you for your time and for creating amazing extensions.

wolfman

I updated to the latest verstion 1.3.3 - pretty sure from 1.3.2 - of FoF reCAPTCHA yesterday.

Today i got messages from my Moderators (it's a Forum with low post frequency) that they can't post anymore! I as Adminstrator can post with no problem.
I just logged in with a normal Debug/Test User-Account, and the same problem: no posting possible. I deactivated FoF reCAPTCHA and everything works fine again.

Edit:
It appears that Firefox, Chrome and Edge now trip the blocking of Third-party cookies.
https://developer.mozilla.org/en-US/docs/Web/Privacy/Storage_Access_Policy/Errors/CookieBlockedTracker

peopleinside

wolfman I had the same issue. I unistalled recaptcha from SSH and reinstalled from SSH.
This resolved the issue for me. I discovered also Flarum was not fully updated and a vulnerability was present.

You can try to see if remove and readd the extension from SSH help and check if you get some warning about security.

Lumeinshin

wolfman Can confirm i've been having the same issue. Can also confirm the issue is on Brave too
Also confirmed that downgrading to 1.3.2 resolves the issue
(doable via composer require fof/recaptcha:1.3.2)

wolfman

peopleinside Thanks for creating the GitHub issue FriendsOfFlarum/recaptcha49

wolfman Today i got messages from my Moderators (it's a Forum with low post frequency) that they can't post anymore!

I looked a little closer at this issue! My mods shouldn't have a problem posting at all, because they have the permission fof-recaptcha.postWithoutCaptcha. As there are a lot of changes regarding this permission from 1.3.2 to 1.3.3 the problem might be there. The blocking of third party cookies might just be a side-effect.

@IanM @davwheat @luceos fyi.

datitisev

1.3.4

wolfman peopleinside Lumeinshin

Fix error when posting if reCAPTCHA wasn't fully configured or the user had permission to bypass it when posting
1.3.3 Fix requiring reCAPTCHA when it is not fully configured (blank key and/or secret) in FriendsOfFlarum/recaptcha48

Full Changelog: FriendsOfFlarum/recaptcha1.3.3 → 1.3.4

wolfman

peopleinside Thanks for the tip. I tried the following, but sadly with no effect. When posting the blocked content counter keeps rising.

composer remove fof/recaptcha
composer require fof/recaptcha:"*"

wolfman

Lumeinshin Thanks. I did that myself too and this resolved the issue for the moment.

peopleinside

Yes, also me now need to downgrade to 1.3.2 still not working ReCaptcha 1.3 seems bugged 🙂

wolfman

datitisev Thanks for the fix! Version 1.3.4 works as intended for me.

agpx

Hi all - I just started using the recaptcha extension and noticed an issue when trying to change passwords.

After selecting 'change password' in the user account, a pop-up window prompts to click the 'send password reset email' button. An error appears after clicking the button, stating 'The g-recaptcha-response field is required'. There is no captcha field visible.

Screenshots:
https://ibb.co/c3bLcxV
https://ibb.co/6bDXsmV

I tried using Firefox and Safari on macOS, as well as Safari on iOS.

pkernstock

I had a massive issue with dozens of thousands of bot accounts over past months, so relying on reCaptcha seems to be the only way fighting this. Unfortunately it looks like this extension is indeed causing major side effects, making parts of the forum functionless. In the past, at least for me, it caused issues when registering via 3rd party logins.

Now, I can reproduce the issue as @agpx stated:

Nothing useful in network tab: (not very surprising)

There is no particular error in flarum*.log file.

EDIT: A (temporary) solution/alternative might be using Turnstile instead. This works:

« Previous Page