苦苦挣扎与recaptcha v2和表单提交

mil*_*edo 14 php forms json recaptcha

https://developers.google.com/recaptcha/docs/verify

if(isset($_POST['submit'])){
$recaptchaResponse = $_POST['g-recaptcha-response'];
$secretKey = 'MYKEY';
$request = file_get_contents("https://www.google.com/recaptcha/api/siteverify?secret=".$secretKey."&response=".$recaptchaResponse);

    if(!strstr($request,"false")){
echo '<div class="notification error clearfix"><p><strong>Attention!</strong> You didnt complete the captcha.</p></div>';
exit();
Run Code Online (Sandbox Code Playgroud)

然后其余的php文件邮寄表单,但即使你没有完成recaptcha它也只是发送.基本上,如果JSON返回false,我希望它不会发送并显示错误

如果它有帮助,这里也是页面的形式,我也可能在那里做错了...

<form method="POST" action="post.php" name="contactform" id="contactform" class="container">

            <fieldset>
                <div class="form-field grid-half">
                    <label for="name">Name</label>
                    <span><input type="text" name="name" id="name" /></span>
                </div>
                <div class="form-field grid-half">
                    <label for="email">Email</label>
                    <span><input type="email" name="email" id="email" /></span>
                </div>
                <div class="form-field grid-full">
                    <label for="message">Message</label>
                    <span><textarea name="message" id="message"></textarea></span>
                </div>                  
                <div class="form-field grid-full">
                        <div class="g-recaptcha" data-sitekey="MYKEY"></div>
                </div>
            </fieldset>
            <div class="form-click grid-full">
                <span><input type="submit" name="submit" value="Submit" id="submit" /></span>
            </div>

            <div id="alert" class="grid-full"></div>
        </form>     
Run Code Online (Sandbox Code Playgroud)

Ala*_*all 24

我发现有时,根据PHP版本/配置,直接访问对象将无法正常工作,因此请使用json_decode().

/* $response object returned from https://www.google.com/recaptcha/api/siteverify via which ever method you use */

$obj = json_decode($response);
if($obj->success == true)
{
    //passes test
}
else
{
    //error handling
}
Run Code Online (Sandbox Code Playgroud)

  • 要清楚,`YOUR_SITE_KEY`应该是"秘密密钥"*不是*"站点密钥"而`$ captcha`是`$ _POST ['g-recaptcha-response']` (3认同)

Pet*_*ter 22

使用curl而不是file_get_contents(如果你像我一样,希望file_get_contents在服务器设置中禁用)

$post_data = "secret=__your_secret_key__&response=".
   $_POST['g-recaptcha-response']."&remoteip=".$_SERVER['REMOTE_ADDR'] ;

$ch = curl_init();  
curl_setopt($ch, CURLOPT_URL, "https://www.google.com/recaptcha/api/siteverify");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_HTTPHEADER, 
   array('Content-Type: application/x-www-form-urlencoded; charset=utf-8', 
   'Content-Length: ' . strlen($post_data)));
curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data); 
$googresp = curl_exec($ch);       
$decgoogresp = json_decode($googresp);
curl_close($ch);

if ($decgoogresp->success == true)
    {
    // Success
    }
Run Code Online (Sandbox Code Playgroud)

  • 我相信这是更好的答案,因为recaptcha v2 API文档指出这应该是POST,而file_get_contents是GET。 (2认同)

Els*_*han 6

将此代码段粘贴到HTML模板上的结束标记之前:

<script src='https://www.google.com/recaptcha/api.js'></script>
Run Code Online (Sandbox Code Playgroud)

将此代码段粘贴到要显示reCAPTCHA小部件的末尾:

<div class="g-recaptcha" data-sitekey="YOUR_SITE_KEY"></div>
Run Code Online (Sandbox Code Playgroud)

范例:

<html>
  <head>
    <title>Google recapcha demo - Codeforgeek</title>
    <script src='https://www.google.com/recaptcha/api.js'></script>
  </head>
  <body>
    <h1>Google reCAPTHA Demo</h1>
    <form id="comment_form" action="form.php" method="post">
      <input type="email" placeholder="Type your email" size="40"><br><br>
      <textarea name="comment" rows="8" cols="39"></textarea><br><br>
      <input type="submit" name="submit" value="Post comment"><br><br>
       <div class="g-recaptcha" data-sitekey="YOUR_SITE_KEY"></div>
    </form>
  </body>
</html>
Run Code Online (Sandbox Code Playgroud)

form.php

<?php

        $email;$comment;$captcha;
        if(isset($_POST['email'])){
          $email=$_POST['email'];
        }if(isset($_POST['comment'])){
          $email=$_POST['comment'];
        }if(isset($_POST['g-recaptcha-response'])){
          $captcha=$_POST['g-recaptcha-response'];
        }
        if(!$captcha){
          echo '<h2>Please check the the captcha form.</h2>';
          exit;
        }
        $response=file_get_contents("https://www.google.com/recaptcha/api/siteverify?secret=YOUR_SECRET_KEY&response=".$captcha."&remoteip=".$_SERVER['REMOTE_ADDR']);
        if($response.success==true)            
        {
          echo '<h2>Thanks for posting comment.</h2>';
        }
?>
Run Code Online (Sandbox Code Playgroud)

or

  • 我发现此解决方案取决于PHP版本和某些配置(某些共享服务器不一定总是可以控制)。为了解决这个问题,可以使用$ obj = json_decode($ response); if($ obj-&gt; {'success'} == true)` (2认同)

Pau*_*hak 5

首先,这里已经给出的答案是绝对足够的。话虽如此,我只是想包含此函数,该函数将这些答案包装到稍微方便一些的方法中,这样您就可以将它们放入函数库中,而在Google更改某些内容之前,几乎不用管它了。请享用!

//Put these two functions into your function library-------
function CaptchaVerify($apiSecret)
{
    //Returns -1 if no captcha response was in post(user did not submit form)
    //Returns 0 if the verification fails
    //Returns 1 if the verification succeeds
    $captcha = isset($_POST['g-recaptcha-response'])? "&response=".$_POST['g-recaptcha-response']:'';
    if($captcha != '')
    {
        $verifyUrl = "https://www.google.com/recaptcha/api/siteverify";
        $apiSecret = "?secret=".$apiSecret;
        $remoteip = "&remoteip=".$_SERVER['REMOTE_ADDR'];
        $response=file_get_contents($verifyUrl.$apiSecret.$captcha.$remoteip);
        $obj = json_decode($response);
        return (integer)$obj->success;          
    }
    return -1;
}
function MyCaptchaVerify()
{
    $apiSecret = "PUT YOUR CAPTCHA SECRET HERE";
    return CaptchaVerify($apiSecret);
}
//-------------------------------------------------------
//Example usage in your form
switch(MyCaptchaVerify())
{
    case -1:echo "The form has not been submitted yet(First Load).<br>";break;
    case  0:echo "The captcha verification failed.<br>";    break;
    case  1:echo "The captcha verification succeeded.<br>"; break;
}
Run Code Online (Sandbox Code Playgroud)

  • 我使用Curl和OOP改进了您的解决方案:https://gist.github.com/sentenza/f4f8dcce126ccba93d042ada5eae379b (3认同)