Overview

This module provides integration with Google reCAPTCHA service for protection site forms.
Read more: http://www.google.com/recaptcha
This new service from Google opens new epoch in spam protection technology.

Even if the site has no comment form (or similar) - it is still necessary to protect!
Why? Because CAPTCHA protects login form (Your site has it, right?) and doesn't allow bad guys to brute-force and use vulnerability like this: https://www.drupal.org/node/2378367

Features

Advantages over standard CAPTCHA:

  • During form creation and form submission special requests will be sent to Google servers - Your server will not spend resources for creating CAPTCHA widget or recognition if this is spam or not.
  • This service provides advanced clever technology to recognize spam and permanently improves.
  • This CAPTCHA is very easy for site visitors. In half cases it is enough just to click "I'm not a robot"! :)

Advantages over others CAPTCHA modules:

  • Standalone module - no dependencies, no additional modules! This module provides only the needful functionality for integration and protection - nothing excess!
  • This module uses latest version of Google CAPTCHA V2 API.

Not only spam protection:

  • Additional defense from brute-force - login form, password recovery form are protected by default!
  • This doesn't allow to spend server resources for further actions of spam requests - validation if submission is good or bad goes before form "submit" handler runs.

Google reCAPTCHA appears in protected forms for all anonymous users. To define which forms must be protected it is possible on admin page:
admin/config/spam_protection/google_recaptcha/forms

Module support forms from Drupal core: login form, password recovery, create new user, comment, poll, contact. And forms created through 'Webforms' module.
If You need support for something else - do not hesitate to create new issue on this page ;)

Configure page

admin/config/spam_protection/google_recaptcha

Settings for VPS or dedicated server

It is necessary to allow new outgoing requests to Google servers from server where Drupal with module works. Readmore: https://code.google.com/archive/p/recaptcha/wikis/FirewallsAndRecaptcha....

Troubleshooting

If server firewall doesn't allow outgoing connections to Google servers or something has happened - and You cannot login to site, it is possible to disable module via "phpmyadmin" or similar tool (look at the screenshot).

P.S.

I developed this module with keeping in mind these properties: Fast and Secure!
Site MUST be protected with modern technologies from server firewall to site forms!

P.P.S.

"localhost is no longer valid without explicitly adding it to your list of domains." (Change log) Be careful, Google service requires additional set keys for development environment:
https://developers.google.com/recaptcha/docs/faq#localhost_support

Project information

Releases