This is very good information I have been searching for. Thank you for taking the time to make this video. There are like no videos on V3! thank you so much.
I have several forms on one page. They all have a recaptcha field but obviously the id needs to be unique. I have an additional string being added to ensure each form has a unique id in the recaptcha field however I am unsure whether Google require the id field to remain as id="g-recaptcha-response" or is it just the name attribute that they use for generating the feedback?
Hi, since you did this tutorial things appear to have changed a little. I am running on localhost the same as you but I am not getting the feedback statements, Success or you are a robot. Instead it directs me to Xampp dashboard. Any ideas as to why? Thanks.
I am assuming that you are running this script in a subfolder on your localhost. Make sure you save it in htdocs root folder or update the action on your form
Thank you very much, Sir. If you development environment is not localhost, but a Virtual Host, how do you add its domain in the V3 Captcha settings page?
@@HaraldWirth SSL_VerifyPeer is not needed! Just make sure the URL is correct www.google.com/recaptcha/api/siteverify?secret='.SECRET_KEY.'&response='.$token
Very good! Google's explanation is vague - to say the least. Also, PHP is a bit foreign to me but managed to transpose reCAPTCHA v2 to reCAPTCHA v3 using ColdFusion with your tutorial. Thank you!
I added recaptcha v3 after watching your video, but I after submitting the form I am getting g-token in my email along with the message. Please tell how to resolve this issue
Is it possible to set an action (if) response is < 0.5 in order to verify if they are indeed a robot? Basically a way to confirm if reCaptcha labels them as bad traffic by mistake. Possibly 2-factor-authentication or email verification?
Thanks for the tutorial. But it’s important to note that the token will expire in 2 minutes. In your example, it’ll expire 2 minutes after the page is loaded. A user will often take longer than 2 minutes to complete a form. Therefore executing the reCAPTCHA for a form should take place upon clicking the form submit button, not on page load. Nearly all v3 videos I’ve watched implement the reCAPTCHA with this same usability problem.
Ater putting a contact form with ReCaptcha in, following the tutorial, onto a live domain I get the following error file_get_contents(): wrapper is disabled in the server configuration by allow_url_fopen=0 From reading many posts, some of which suggest changing allow_url_fopen=0 to allow_url_fopen=1 and many more saying this causes many more problems than it resolves, security wise I found a few saying to use curl instead of file_get_contents. Have you come accross this issue, and if so, how did you resolve it?
Are you trying to create a plugin? There are plugins like Contact Form 7 and Gravity Forms that have this functionality integrated. You just have to generate a secret key.
getting a strange fatal error related with... facebook!?!?! when i submit my form (which only asks for name, email, subject and comment), it appears that recaptcha is asking for facebook all.js and is trying to login for some reason
How do I debug if I always get "invalid-input-response" returned when getting the response? I have verifies that the Secret key is correct and that the token is being passed to the response page
Thank you sir. I have noticed that Google maps API documentation and now for me Google-reCaptcha documentation are not enough to run those services without looking outside the official documentation. Someone knows what's the reason or I am wrong? Anyway, thank you very much.
sir, I want to say that I work a different type of website. recent show this problem at a fixed time and regular occurred. someone tell me that' you have to buy dedicated IP & it will help to solve this problem. please help me which is best for using............at the same time other users log in this website and perform work but I cannot do that, how it is solved? this problem is..... There is a high number of applications being processed at the moment. Please try again later
Hi, thanks for the code, this really helps. Anyway, i am still struggeling to extend the code to be able to display a different DIV on success/failure. The idea is to use it on an order form, on success it should hide the input form and show the confirmation information to the user and on failure it should show the error information. Any idea how to accomplish this?
Sir, thank you very much for your effort. This was a huge help for me. One tiny question please... I wanted to hide the JS code after the form as everyone can see the source. Have created extra file in the dedicated JS folder and entered the path in the form file. Now a token wont be generated and the message is always "You are a robot". Is it an issue if I leave the the JS code with the SITE_KEY on the form page or even better, is there a way to hide the code? Thanks in Advance Lyubo
Honeypot form protection means that an invisible field is added to a form. If this invisible field is filled out (bots will usually put in a value), then the form will return an error. Normal users (read: human beings) won't ever see the field, so they won't fill it out. Even if they do, the field is labeled in such a way as to indicate the human shouldn't fill out the field. This is not foolproof, though, as many spam bots can detect hidden fields, and they can also be adapted to work around a particular field on your site (this isn't typically the case for smaller sites, though). Google reCAPTCHA learns by seeing real traffic on your site and then it returns a score (1.0 is very likely a good interaction, 0.0 is very likely a bot). Based on the score, you can take variable action in the context of your site. In my opinion the honey pot method is good for smaller sites but when you get bigger it's good to use reCAPTCHA or both.
Beware this guy. He'll mumble quietly, you'll turn up your volume, and at the 4 minute mark he is going to ping a windows notification and blow your ear drums out.
Hello. This is a great tutorial. it explain really good how to do it. But I have a problem, and i hope you can help me. I have my website in HMTL5, the contact form on submit call a send.php file it contains the info of the form, and if everything is correct, the website call a javascript file it shows the personalized message for "succes" or if is wrong or something is not writed it will show the personalized message for "error". I am trying for months to intagrete recaptcha in my website. At the beginning i had no idea how to do it (Thanks to your tutorial i start now to understand how it runs). But this tutorial explain how to intagrate in a very simple contact form. How can I do to integrate it with my personalized files? I copied your code and intagrate like yours. for it i change my contact.html to contact.php site. Then I used the code exactly like you but of course with my keys. The thing is that my website is completed designed, and yours a very simple site. At the end of the tutorial we can see the answer of google under the button "submit", but it is dont shown on my web site. But i see everytime the recaptcha logo on my web site in the same place where its allways showed. For my tests i put the input type for recaptcha as text, and I can see the feld on the form, but i never have the answer of google as succes like you in your tutorial. If i try to fill the form everything look as i programmed and the emails are also sended and also its call my javascript to show me the personalized messages for "succes" or "error". For this reason i am not sure if recaptcha is running like it have to do it. I am checking my emails and i am receiving my emails, but i never came the info of google anywhere. Thanks for your time. I really appreciate if you answer and if we can talk about it because i receive really to much spam every day and its something really stressful. I also try to force a minimun of characters on the message text, but also I continues receiving the same spam (and all them are short text though I force a minimun of characters). Best regards!
why cant anything be correct and upto date nothing you have written is on google v3 for e.g. where is this in your video function onClick(e) { e.preventDefault(); grecaptcha.ready(function() { grecaptcha.execute('reCAPTCHA_site_key', {action: 'submit'}).then(function(token) { // Add your logic to submit to your backend server here. }); }); }
if file_get_contents is not working for you, you can use this function instead: function getCaptcha($captcha){ $ch = curl_init(); curl_setopt_array($ch, [ CURLOPT_URL => 'www.google.com/recaptcha/api/siteverify', CURLOPT_POST => true, CURLOPT_POSTFIELDS => [ 'secret' => SECRET_KEY, 'response' => $captcha, 'remoteip' => $_SERVER['REMOTE_ADDR'] ], CURLOPT_RETURNTRANSFER => true ]); $output = curl_exec($ch); curl_close($ch); $json = json_decode($output); return $json; }
I do not fucking get it. Docs on google actually says that its easy, you need to copy 10 lines of code - and its not working in my case. I am checking youtube tutorial - it has tons more. I do not get it..
![BLACK BAG - Official Trailer [HD] - Only in Theaters March 14](http://i.ytimg.com/vi/Du0Xp8WX_7I/mqdefault.jpg)
This is very good information I have been searching for. Thank you for taking the time to make this video. There are like no videos on V3! thank you so much.
It is still true in 2020! I have searched about it a lot, but couldn't find great content until I find this guy! Liked and Subbed!
In my opinion that yellow translucent dot is more annoying than helpful.
Great tutorial! Straightforward and easy to follow. Thanks for including your source code.
Thanks to your tutorial I managed to protect my site against a tonne of webform spam. A great video thank you so much! Liked and subbed :)
Warning headphone users: 3:59
A great video that transparently shows the implementation of reCaptcha v3. It helped me a lot. Thank you!
BEST video instructions I found.
you are the man, I would have never figured it out without this video, thank you soooo much
You're welcome!
@@VicodeMedia hello
I have several forms on one page. They all have a recaptcha field but obviously the id needs to be unique. I have an additional string being added to ensure each form has a unique id in the recaptcha field however I am unsure whether Google require the id field to remain as id="g-recaptcha-response" or is it just the name attribute that they use for generating the feedback?
Hi, since you did this tutorial things appear to have changed a little. I am running on localhost the same as you but I am not getting the feedback statements, Success or you are a robot. Instead it directs me to Xampp dashboard. Any ideas as to why? Thanks.
I am assuming that you are running this script in a subfolder on your localhost. Make sure you save it in htdocs root folder or update the action on your form
@@VicodeMedia hi, I have the css files in a subfolder and everything is working as expected. Thanks again for your help.
Thank you very much, Sir.
If you development environment is not localhost, but a Virtual Host, how do you add its domain in the V3 Captcha settings page?
note: some might end up with NULL response when the file_get_contents is disabled on server.
Use CURL instead and use curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
@@HaraldWirth SSL_VerifyPeer is not needed! Just make sure the URL is correct www.google.com/recaptcha/api/siteverify?secret='.SECRET_KEY.'&response='.$token
Very good! Google's explanation is vague - to say the least. Also, PHP is a bit foreign to me but managed to transpose reCAPTCHA v2 to reCAPTCHA v3 using ColdFusion with your tutorial. Thank you!
Nice tutorial, works flawlessly!!
Hi, and thanks for a great tutorial. One question: Is the php script at the top necessary, or did you just insert it to see if everything works?
Hi! Yes you need that script to get the response from Google. You get the score and based on it you take action.
@@VicodeMedia but is the only action taken in your code an echo? or does it post the email if the score is above 0.5?
Excellent tutorial, super clear and simple! Thanks.
Great video my friend - cleared a lot up for me thank you
Thank you for this post...How come you didn't use Automatically bind the challenge to a button?
I added recaptcha v3 after watching your video, but I after submitting the form I am getting g-token in my email along with the message. Please tell how to resolve this issue
Thank yoy so much!! I have been able to implement it thanks to your video!!!! Regards from Argentina.
You're welcome! Thank you!
Is it possible to set an action (if) response is < 0.5 in order to verify if they are indeed a robot? Basically a way to confirm if reCaptcha labels them as bad traffic by mistake. Possibly 2-factor-authentication or email verification?
How do you bring up the captcha validation if it is a robot?
Thanks for the tutorial. But it’s important to note that the token will expire in 2 minutes. In your example, it’ll expire 2 minutes after the page is loaded. A user will often take longer than 2 minutes to complete a form. Therefore executing the reCAPTCHA for a form should take place upon clicking the form submit button, not on page load. Nearly all v3 videos I’ve watched implement the reCAPTCHA with this same usability problem.
BRO I LOVE YOU
thank you , it worked well for me , a great video for a newbie like me
You're welcome!
Ater putting a contact form with ReCaptcha in, following the tutorial, onto a live domain I get the following error
file_get_contents(): wrapper is disabled in the server configuration by allow_url_fopen=0
From reading many posts, some of which suggest changing allow_url_fopen=0 to allow_url_fopen=1 and many more saying this causes many more problems than it resolves, security wise I found a few saying to use curl instead of file_get_contents.
Have you come accross this issue, and if so, how did you resolve it?
Could you advice me on how to set the recaptcha actions in WordPress ? Everything else appears great.
Are you trying to create a plugin? There are plugins like Contact Form 7 and Gravity Forms that have this functionality integrated. You just have to generate a secret key.
Awesome! Thank you so much. Saved me a lot of time.
Very well explained, good job!!!!
If you want to avoid hearing loss, DO NOT WEAR HEADPHONES!
shouldn't you be using
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
}
to check if it's a POST request?
I use if ($_SERVER['REQUEST_METHOD'] === 'POST') to check
Excellent Job. Thank you. Very helpful!
You're welcome!
Won't work, object(stdClass)#1 (2) { ["success"]=> bool(false) ["error-codes"]=> array(2) { [0]=> string(22) "invalid-input-response" [1]=> string(20) "invalid-input-secret" } }
Hi! Did you try the source code from GitHub?
getting a strange fatal error related with... facebook!?!?! when i submit my form (which only asks for name, email, subject and comment), it appears that recaptcha is asking for facebook all.js and is trying to login for some reason
How do I debug if I always get "invalid-input-response" returned when getting the response? I have verifies that the Secret key is correct and that the token is being passed to the response page
Did you get a solution for this problem¿ I am in the same trouble right now...
Anyway this helpful video is awesome! thanks to @Vicode Media
How to do it in magento2
Thanks for good explanation.
Hi, when I follow your codes, some of the code on the top of my page. (success == true && $Return->score >0.5{ echo "
Hi! Can you be more explicit please?
Thank you sir. I have noticed that Google maps API documentation and now for me Google-reCaptcha documentation are not enough to run those services without looking outside the official documentation. Someone knows what's the reason or I am wrong? Anyway, thank you very much.
Thank you for the tutorial, it's useful and very clean ;)
Spook button 👉 3:59
Hi, Thanks for it, But we can change hidden input to text through inspect element? so any other option for it?
So what if you can do that? What's wrong with it? 😁
@@VicodeMedia Then you can change the key value as well
That key value changes all the time and only you have access to it. It's unique for everyone and only you can see it on your end
sir, I want to say that I work a different type of website. recent show this problem at a fixed time and regular occurred. someone tell me that' you have to buy dedicated IP & it will help to solve this problem. please help me which is best for using............at the same time other users log in this website and perform work but I cannot do that, how it is solved?
this problem is..... There is a high number of applications being processed at the moment. Please try again later
How do you pop up a check box for recapture or pictures to authenticate the user?
Did you mean recaptcha v2?
Hey, I can't send the email, I follow everything you say but my var_dump return "invalid-input-response", what I can do?
Perfect Man!. You are great!
The sound quality is awful
How
I need it because of my roblox i cant log in
Fantastic Video Thank You.
thankyou so much.. help me a lot!
Yesssss!!! Thank you!!
Thanks for the video, helped a lot:)
great vid but beware at 3:58
Can you do reCaptcha for amp page. Thank you.
How do i lower my google score on other websites?
By changing the rule in you if statement where you check the score
@@VicodeMedia and do you have tip to get mu score higher so that when the recaptcha appears i dont have to select the images?
Thank you Sir, you helped me out-. I successfully implemented on a website.
Hi, thanks for the code, this really helps. Anyway, i am still struggeling to extend the code to be able to display a different DIV on success/failure. The idea is to use it on an order form, on success it should hide the input form and show the confirmation information to the user and on failure it should show the error information. Any idea how to accomplish this?
Sir, thank you very much for your effort. This was a huge help for me. One tiny question please... I wanted to hide the JS code after the form as everyone can see the source. Have created extra file in the dedicated JS folder and entered the path in the form file. Now a token wont be generated and the message is always "You are a robot". Is it an issue if I leave the the JS code with the SITE_KEY on the form page or even better, is there a way to hide the code?
Thanks in Advance
Lyubo
hi, thank you for this info, can you advise how to post the form to an email address?
Do you want to send an email with the submitted data?
Great video! How is this better than a honey pot variable?
Honeypot form protection means that an invisible field is added to a form. If this invisible field is filled out (bots will usually put in a value), then the form will return an error. Normal users (read: human beings) won't ever see the field, so they won't fill it out. Even if they do, the field is labeled in such a way as to indicate the human shouldn't fill out the field.
This is not foolproof, though, as many spam bots can detect hidden fields, and they can also be adapted to work around a particular field on your site (this isn't typically the case for smaller sites, though).
Google reCAPTCHA learns by seeing real traffic on your site and then it returns a score (1.0 is very likely a good interaction, 0.0 is very likely a bot). Based on the score, you can take variable action in the context of your site.
In my opinion the honey pot method is good for smaller sites but when you get bigger it's good to use reCAPTCHA or both.
@@VicodeMedia Awesome. Thanks for the response!
@@VicodeMediavcizek
0
This code is actual now?
Yes.
Beware this guy. He'll mumble quietly, you'll turn up your volume, and at the 4 minute mark he is going to ping a windows notification and blow your ear drums out.
I'm sorry about that...
very useful, thank you so much!
very usefull! thank you!
Hello. This is a great tutorial. it explain really good how to do it.
But I have a problem, and i hope you can help me.
I have my website in HMTL5, the contact form on submit call a send.php file it contains the info of the form, and if everything is correct, the website call a javascript file it shows the personalized message for "succes" or if is wrong or something is not writed it will show the personalized message for "error".
I am trying for months to intagrete recaptcha in my website.
At the beginning i had no idea how to do it (Thanks to your tutorial i start now to understand how it runs).
But this tutorial explain how to intagrate in a very simple contact form.
How can I do to integrate it with my personalized files?
I copied your code and intagrate like yours.
for it i change my contact.html to contact.php site.
Then I used the code exactly like you but of course with my keys.
The thing is that my website is completed designed, and yours a very simple site.
At the end of the tutorial we can see the answer of google under the button "submit", but it is dont shown on my web site. But i see everytime the recaptcha logo on my web site in the same place where its allways showed.
For my tests i put the input type for recaptcha as text, and I can see the feld on the form, but i never have the answer of google as succes like you in your tutorial.
If i try to fill the form everything look as i programmed and the emails are also sended and also its call my javascript to show me the personalized messages for "succes" or "error". For this reason i am not sure if recaptcha is running like it have to do it.
I am checking my emails and i am receiving my emails, but i never came the info of google anywhere.
Thanks for your time.
I really appreciate if you answer and if we can talk about it because i receive really to much spam every day and its something really stressful.
I also try to force a minimun of characters on the message text, but also I continues receiving the same spam (and all them are short text though I force a minimun of characters).
Best regards!
thanks Vicode !
Voice too low and going too fast
Thank you for your feedback! 👍
why cant anything be correct and upto date nothing you have written is on google v3 for e.g. where is this in your video
function onClick(e) {
e.preventDefault();
grecaptcha.ready(function() {
grecaptcha.execute('reCAPTCHA_site_key', {action: 'submit'}).then(function(token) {
// Add your logic to submit to your backend server here.
});
});
}
Solid tutorial, but doesn't really show to actually use it in a real website.
Thanks, but what do you mean by a real website? Isn't the form in the video enough to understand how to secure your website?
Thank you for this. I had no trouble following the video. It hasn't worked for me yet though.
John, I answered to your email... You just need to change the form action
@@VicodeMedia Huge thank you for that Victor.
I am having troubles, I am getting NULL back in the dump!
if file_get_contents is not working for you, you can use this function instead:
function getCaptcha($captcha){
$ch = curl_init();
curl_setopt_array($ch, [
CURLOPT_URL => 'www.google.com/recaptcha/api/siteverify',
CURLOPT_POST => true,
CURLOPT_POSTFIELDS => [
'secret' => SECRET_KEY,
'response' => $captcha,
'remoteip' => $_SERVER['REMOTE_ADDR']
],
CURLOPT_RETURNTRANSFER => true
]);
$output = curl_exec($ch);
curl_close($ch);
$json = json_decode($output);
return $json;
}
I can see the key also here:
I gues it is not an issue in this case that my key is visible
Your key is restricted to the domains you entered in the Domains text area whenever you registered your project on google.
@@VicodeMedia Understood. thanks a lot :-)
Very good!!!
Thanks so much !!!!!!!!!!
excelente, didático e prático
Thanks bro!
I do not fucking get it. Docs on google actually says that its easy, you need to copy 10 lines of code - and its not working in my case. I am checking youtube tutorial - it has tons more. I do not get it..
awesome
Спасибо!
thank you
I guess Google updated the reCaptcha pages and I'm seeing completely different things than what your tutorial is illustrating. Totally not helpful.
SO shit sound quality T_T
Nice
recaptcha is no longer free
It's still free.