Captcha
Ārai i ngā Pōtae. Tiaki i te Whiwhinga Moni. Kore rawa he Raruraru Whirihoranga.
Kei te whakahaere koe i tētahi whatunga pae-maha me ngā rohe ritenga? E mōhio ana koe ki te mamae: me rēhita e koe ki a Google reCAPTCHA me hCaptcha ia rohe kotahi ki roto i tō rātou papatohu whakahaere. Ka tāpiri i tētahi pae kiritaki hou? Whakahōu i te whirihoranga captcha. Ka mahere i tētahi rohe ritenga? Whakahōu anō. Kāore rawa e mutu.
Ultimate Multisite: Ka panoni katoa a Captcha i ngā mea katoa.
Cap Captcha: He Tiakitanga Manaaki-whaiaro e Mahi Noa Ana
Ko tā mātou kaiwhakarato Cap Captcha hou he mea panoni kēmu mō ngā whatunga pae-maha:
- Kore Whirihoranga — Whakahohea te tāpiritanga, ā, kua tiakina koe. Kāore he kī API, kāore he pūkete Google, kāore he papatohu hCaptcha, kāore he whakarārangi-mā rohe.
- Ka Mahi Aunoa i ia Rohe — Ngā rohe-iti, ngā rohe kua mapi, ngā rohe kiritaki—kua tiakina katoa inamata.
- Manaaki-whaiaro, Tūmataiti hoki — Kāore ō raraunga e wehe i tō tūmau. He tino ū ki te GDPR, ā, kāore he aroturuki hunga tuatoru.
- Tohu-mahi Kāore e Kitea — Ka whakaoti ngā kaiwhakamahi i tētahi panga tātaitanga i te papamuri. Kāore he pāwhiri i ngā kōrere wai ahi, kāore he mātiti whakaahua whakararu.
- Māmā — 20KB noa iho. E kore e whakaroa i tō checkout.
Tiakitanga Whakamātau Kāri WooCommerce
Ka pau i ngā whakaeke whakamātau kāri ngā piriona moni a ngā kaihokohoko ia tau. Ka whakamahi ngā kaipahua i ngā pōtae hei whakamana i ngā kāri nama kua tāhaetia mā tō checkout WooCommerce—ka utu koe i ngā utu tukatuka, ka riro i a rātou ngā tau kāri whaimana.
Ka tiaki mātou i te wāhi tino hira:
- Tiakitanga Store API — Ka aukati i ngā whakaeke pōtae ki
/wp-json/wc/store/v1/checkoute karo ana i ngā captcha puka tuku iho - Hototahi ki PayPal Payments — Ka mahi māeneene me WooCommerce PayPal Payments
- Tatauranga Wā-tūturu — Tirohia pū te maha o ngā whakaeke e aukatia ana e koe
Kei te Hiahia Tonu ki a Google reCAPTCHA, ki a hCaptcha rānei?
Kua rite mātou ki te āwhina i a koe. He tautoko katoa mō:
- Google reCAPTCHA v2 (Pouakataki)
- Google reCAPTCHA v2 (Kāore e Kitea)
- Google reCAPTCHA v3 (Hāngai-ki-te-kaute)
- hCaptcha (Paerewa)
- hCaptcha (Kāore e Kitea)
Whakawhiti i waenga i ngā kaiwhakarato i ngā wā katoa mai i ō tautuhinga whatunga.
I Hangaia mō te Whakanui
- Ngā tautuhinga puta noa i te whatunga me ngā takahi ā-pae
- Papatohu tatauranga hei aroturuki i te tiakitanga
- Ngā taumata haumarutanga ka taea te whakatika (Tere, Waenga, Mōrahi)
- He pai ki ngā kaiwhakawhanake me te hoahoanga kaiwhakarato ka taea te whakawhānui
Tāutanga
- Tukuake
ultimate-multisite-captchaki tō whaiaronga/wp-content/plugins/ - Whakahohe ā-whatunga i te plugin
- Koia tēnā. Kua tiakina koe.
Ka whakahohe aunoa a Cap Captcha—kāore he tautuhinga hei whirihora, kāore he kī API hei tāuru. Ka tiakina ia wāhi-mutunga tautokona puta noa i tō whatunga katoa i te wā tonu ka whakahohe koe.
Kōwhiringa: Hei whakamahi i a Google reCAPTCHA, i a hCaptcha rānei hei kē, whakatere ki Ultimate Multisite → Settings → Captcha ka tīpako i tō kaiwhakarato pai ake.
Ngā Pātai Auau
Me whirihora e au tētahi mea?
Kāo! Ka whakahohea aunoa a Cap Captcha ina whakahohe koe i te tāpiritanga. Ka tiakina tō whatunga katoa inamata—kāore he tautuhinga hei whirihora, kāore he kī API hei tāuru.
Me whai kī API au mō Cap Captcha?
Kāo. He tino manaaki-whaiaro a Cap Captcha. Kāore he pūkete waho, kāore he rēhitatanga rohe, kāore he mamae māhunga whirihoranga.
Ka whakaroa tēnei i taku checkout?
20KB noa iho a Cap Captcha, ā, ka whakahaere i ngā wero tohu-mahi i te papamuri. Kāore ō kiritaki e kite i tētahi whakaroanga.
Ka tiaki tēnei i ngā whakaeke whakamātau kāri?
Āe! Kāore i rite ki ngā captcha tuku iho e tiaki ana i ngā puka HTML anake, ka hono tō mātou tuitui WooCommerce ki roto tonu i te Store API hei aukati i ngā whakaeke pōtae i te taumata API—te wāhi e pā ana te nuinga o ngā whakaeke whakamātau kāri.
Ka taea e au te whakamahi i ngā kaiwhakarato captcha rerekē ki ngā pae rerekē?
Ka tautuhia te kaiwhakarato captcha puta noa i te whatunga, engari ka taea e koe te whakatika i ngā tautuhinga uaua i runga i ō hiahia.
He ū tēnei ki te GDPR?
He 100% manaaki-whaiaro a Cap Captcha, ā, kāore he raraunga e tukuna ki ngā ratonga waho. Mō Google reCAPTCHA me hCaptcha, tēnā arotakengia ā rātou kaupapahere tūmataiti takitahi.
Whakawhāiti Auau
Ka whakauru a Ultimate Multisite: Captcha v1.5.0 i tētahi kaiwhakawhāiti auau aukati-kaha e tiaki ana i tō whatunga i ngā whakaeke brute-force me ngā whakaeke whakamātau-kāri.
Te Āhua o Tana Mahi
Ka tatau te kaiwhakawhāiti auau i ia tono GET me POST ki ngā mata kua tiakina e captcha:
- Ngā wāhi-mutunga takiuru WordPress — wp-login, register, lost-password, comments
- WooCommerce checkout — my-account, checkout, pay-for-order
- Ultimate Multisite — checkout, inline-login
Ina hipa tētahi manuhiri i te tepenga auau, ka whakautu te plugin me:
- HTTP 429 (He Nui Rawa ngā Tono) waehere tūnga
- Pane Retry-After e tohu ana i te wā hei whakamātau anō
- Moe tarpit matapōkeretia (1–5 hēkona mā te taunoa, kua herea-kaha ki te 15 hēkona) hei whakaroa i ngā kaiwhakaeke
Whirihoranga
Wātaka Tarpit
Whakahaerehia te whakaroanga matapōkeretia ka hoatu ki ngā tono kua whakawhāitihia te auau:
cap_rate_limit_tarpit_min— Roanga moe mōkito i ngā hēkona (taunoa: 1)cap_rate_limit_tarpit_max— Roanga moe mōrahi i ngā hēkona (taunoa: 5, kua herea-kaha ki te 15)
Kei te wātea ēnei tautuhinga i Ultimate Multisite → Settings → Captcha.
Whakawhānuitanga
Tātari Rārangi-mā IP
Whakawāteatia ngā awhe IP whirinaki i te whakawhāiti auau:
add_filter( 'wu_cap_rate_limit_whitelist_ip', function( $is_whitelisted, $ip ) {
// Whitelist your monitoring service
if ( $ip === '203.0.113.42' ) {
return true;
}
return $is_whitelisted;
}, 10, 2 );
Hohenga I mua i te Aukatinga
Whakahaerehia he arorau ritenga i mua tonu i te tukunga o tētahi aukatinga tepenga-auau:
add_action( 'wu_cap_rate_limit_will_block', function( $ip, $surface ) {
// Log the block, notify admins, or update custom metrics
error_log( "Rate limit triggered for $ip on $surface" );
}, 10, 2 );
Rapunga IP Kiritaki me ngā Takawaenga Whirinaki
Ka whakauru a Ultimate Multisite: Captcha v1.5.0 i te rapunga IP-kiritaki ātete-whakapohehe. Ko te aratuka Captcha_Core::get_client_ip() ināianei te puna pono kotahi mō te tautuhi IP manuhiri puta noa i:
- Ngā kī kete rate-limit
- Kaiwhakarato Captcha
remoteip(reCAPTCHA, hCaptchasiteverify) - Ngā hash IP tatauranga
Tauira Whirinaki
Ka whakaū te monomai i tētahi arapiki whirinaki IP tino pūmau:
- REMOTE_ADDR — Ka whirinakitia i ngā wā katoa (te IP o te hoa tata tonu)
- CF-Connecting-IP — Ka whai mana anake ina:
- Kei roto te hoa tata tonu i tētahi awhe IP Cloudflare o nāianei
- Kua whakahohea
cap_trust_cloudflare_headers(taunoa: WETO)
- X-Forwarded-For — Ka whai mana anake ina:
- Kei roto te hoa tata tonu i tō rārangi trusted-proxy kua whirihorahia e te kaiwhakahaere
- Ka wetewetehia te header mai matau ki mauī, me te peke i ngā peke trusted/Cloudflare
Whirihoranga
Whirinaki Header Cloudflare
Whakahohea te whirinaki ki te header CF-Connecting-IP a Cloudflare:
cap_trust_cloudflare_headers— Tautuhia ki ON kia uru ki te whirinakiCF-Connecting-IP- Taunoa: OFF (kua monokia)
- Ka tukuna mai te monomai me tētahi whakaahua CIDR Cloudflare kua whakaurua
- Ka whakahoutia ngā awhe CIDR ia wiki mā wp-cron
- Ka whakamahia te kōwhiringa hoki kua whakaurua mēnā ka rahua te whakahou
Whirihoranga Takawaenga Whirinaki
Tautuhia ō takawaenga rārangi-mua me ō load-balancers:
cap_trusted_proxies— Textarea o ngā CIDR, o ngā IP kau rānei (kotahi ia rārangi)- Ka whakaaetia ngā tākupu (ngā rārangi e tīmata ana ki
#) - Ki te kore tēnei tautuhinga, ka warewarehia
X-Forwarded-Forahakoa kua whakahohea te rate limiter - Tauira:
# Our load balancer
192.0.2.0/24
# Backup proxy
198.51.100.50
- Ka whakaaetia ngā tākupu (ngā rārangi e tīmata ana ki
Kite-Aunoa i te Whakahohe-Tuatahi
Ina whakahohe tuatahi koe i te rate limiter, ka kite te monomai i tō āhua Cloudflare me tō āhua takawaenga pea, ā, ka whakaatu i tētahi whakamōhiotanga kaiwhakahaere pāwhiri-kotahi "Hoatu ngā tautuhinga kua kitea".
- Kāore rawa te monomai e tuhirua i ō uara kua tiakina
- Mēnā ka tohu ngā hokohoko whai muri kua kore tō whirihoranga e hāngai ki te tino āhuatanga (hei tauira, kua huri a Cloudflare i ngā awhe CIDR), ka puta ake tētahi whakamōhiotanga rerekētanga kāore e taea te whakakore, e whakaatu ana i te whakahou e taunakitia ana
He Aha i Hirahira ai Tēnei
Ka kati tētahi tauira whirinaki IP tino pūmau i tētahi ara rūpahu nui: ko ngā tono tika ki te origin-server e kawe ana i tētahi header CF-Connecting-IP rūpahu, i mua, kua whakaketea mā te IP rūpahu kē, kaua mā te hoa tūturu. He mea tino hirahira tēnei mō:
- Whakawhāiti tere — Kāore e taea e ngā kaikōkiri te karo i ngā tepenga mā te rūpahu IP
- Tatauranga — Ka whakaata ō inenga whakaeke i ngā IP manuhiri tūturu, kaua ko ngā mea rūpahu
- Manatokonga Captcha — Ka whiwhi ngā kaiwhakarato i te IP manuhiri tika mō te aromatawai tūraru