Skip to main content
Paid AddonPurchase Captcha | Install via your site's addon page or download from your account

Captcha

Ārai i ngā Pōtae. Tiaki i te Whiwhinga Moni. Kore rawa he Raruraru Whirihoranga.

Kei te whakahaere koe i tētahi whatunga pae-maha me ngā rohe ritenga? E mōhio ana koe ki te mamae: me rēhita e koe ki a Google reCAPTCHA me hCaptcha ia rohe kotahi ki roto i tō rātou papatohu whakahaere. Ka tāpiri i tētahi pae kiritaki hou? Whakahōu i te whirihoranga captcha. Ka mahere i tētahi rohe ritenga? Whakahōu anō. Kāore rawa e mutu.

Ultimate Multisite: Ka panoni katoa a Captcha i ngā mea katoa.

Cap Captcha: He Tiakitanga Manaaki-whaiaro e Mahi Noa Ana

Ko tā mātou kaiwhakarato Cap Captcha hou he mea panoni kēmu mō ngā whatunga pae-maha:

  • Kore Whirihoranga — Whakahohea te tāpiritanga, ā, kua tiakina koe. Kāore he kī API, kāore he pūkete Google, kāore he papatohu hCaptcha, kāore he whakarārangi-mā rohe.
  • Ka Mahi Aunoa i ia Rohe — Ngā rohe-iti, ngā rohe kua mapi, ngā rohe kiritaki—kua tiakina katoa inamata.
  • Manaaki-whaiaro, Tūmataiti hoki — Kāore ō raraunga e wehe i tō tūmau. He tino ū ki te GDPR, ā, kāore he aroturuki hunga tuatoru.
  • Tohu-mahi Kāore e Kitea — Ka whakaoti ngā kaiwhakamahi i tētahi panga tātaitanga i te papamuri. Kāore he pāwhiri i ngā kōrere wai ahi, kāore he mātiti whakaahua whakararu.
  • Māmā — 20KB noa iho. E kore e whakaroa i tō checkout.

Tiakitanga Whakamātau Kāri WooCommerce

Ka pau i ngā whakaeke whakamātau kāri ngā piriona moni a ngā kaihokohoko ia tau. Ka whakamahi ngā kaipahua i ngā pōtae hei whakamana i ngā kāri nama kua tāhaetia mā tō checkout WooCommerce—ka utu koe i ngā utu tukatuka, ka riro i a rātou ngā tau kāri whaimana.

Ka tiaki mātou i te wāhi tino hira:

  • Tiakitanga Store API — Ka aukati i ngā whakaeke pōtae ki /wp-json/wc/store/v1/checkout e karo ana i ngā captcha puka tuku iho
  • Hototahi ki PayPal Payments — Ka mahi māeneene me WooCommerce PayPal Payments
  • Tatauranga Wā-tūturu — Tirohia pū te maha o ngā whakaeke e aukatia ana e koe

Kei te Hiahia Tonu ki a Google reCAPTCHA, ki a hCaptcha rānei?

Kua rite mātou ki te āwhina i a koe. He tautoko katoa mō:

  • Google reCAPTCHA v2 (Pouakataki)
  • Google reCAPTCHA v2 (Kāore e Kitea)
  • Google reCAPTCHA v3 (Hāngai-ki-te-kaute)
  • hCaptcha (Paerewa)
  • hCaptcha (Kāore e Kitea)

Whakawhiti i waenga i ngā kaiwhakarato i ngā wā katoa mai i ō tautuhinga whatunga.

I Hangaia mō te Whakanui

  • Ngā tautuhinga puta noa i te whatunga me ngā takahi ā-pae
  • Papatohu tatauranga hei aroturuki i te tiakitanga
  • Ngā taumata haumarutanga ka taea te whakatika (Tere, Waenga, Mōrahi)
  • He pai ki ngā kaiwhakawhanake me te hoahoanga kaiwhakarato ka taea te whakawhānui

Tāutanga

  1. Tukuake ultimate-multisite-captcha ki tō whaiaronga /wp-content/plugins/
  2. Whakahohe ā-whatunga i te plugin
  3. Koia tēnā. Kua tiakina koe.

Ka whakahohe aunoa a Cap Captcha—kāore he tautuhinga hei whirihora, kāore he kī API hei tāuru. Ka tiakina ia wāhi-mutunga tautokona puta noa i tō whatunga katoa i te wā tonu ka whakahohe koe.

Kōwhiringa: Hei whakamahi i a Google reCAPTCHA, i a hCaptcha rānei hei kē, whakatere ki Ultimate Multisite → Settings → Captcha ka tīpako i tō kaiwhakarato pai ake.

Ngā Pātai Auau

Me whirihora e au tētahi mea?

Kāo! Ka whakahohea aunoa a Cap Captcha ina whakahohe koe i te tāpiritanga. Ka tiakina tō whatunga katoa inamata—kāore he tautuhinga hei whirihora, kāore he kī API hei tāuru.

Me whai kī API au mō Cap Captcha?

Kāo. He tino manaaki-whaiaro a Cap Captcha. Kāore he pūkete waho, kāore he rēhitatanga rohe, kāore he mamae māhunga whirihoranga.

Ka whakaroa tēnei i taku checkout?

20KB noa iho a Cap Captcha, ā, ka whakahaere i ngā wero tohu-mahi i te papamuri. Kāore ō kiritaki e kite i tētahi whakaroanga.

Ka tiaki tēnei i ngā whakaeke whakamātau kāri?

Āe! Kāore i rite ki ngā captcha tuku iho e tiaki ana i ngā puka HTML anake, ka hono tō mātou tuitui WooCommerce ki roto tonu i te Store API hei aukati i ngā whakaeke pōtae i te taumata API—te wāhi e pā ana te nuinga o ngā whakaeke whakamātau kāri.

Ka taea e au te whakamahi i ngā kaiwhakarato captcha rerekē ki ngā pae rerekē?

Ka tautuhia te kaiwhakarato captcha puta noa i te whatunga, engari ka taea e koe te whakatika i ngā tautuhinga uaua i runga i ō hiahia.

He ū tēnei ki te GDPR?

He 100% manaaki-whaiaro a Cap Captcha, ā, kāore he raraunga e tukuna ki ngā ratonga waho. Mō Google reCAPTCHA me hCaptcha, tēnā arotakengia ā rātou kaupapahere tūmataiti takitahi.

Whakawhāiti Auau

Ka whakauru a Ultimate Multisite: Captcha v1.5.0 i tētahi kaiwhakawhāiti auau aukati-kaha e tiaki ana i tō whatunga i ngā whakaeke brute-force me ngā whakaeke whakamātau-kāri.

Te Āhua o Tana Mahi

Ka tatau te kaiwhakawhāiti auau i ia tono GET me POST ki ngā mata kua tiakina e captcha:

  • Ngā wāhi-mutunga takiuru WordPress — wp-login, register, lost-password, comments
  • WooCommerce checkout — my-account, checkout, pay-for-order
  • Ultimate Multisite — checkout, inline-login

Ina hipa tētahi manuhiri i te tepenga auau, ka whakautu te plugin me:

  • HTTP 429 (He Nui Rawa ngā Tono) waehere tūnga
  • Pane Retry-After e tohu ana i te wā hei whakamātau anō
  • Moe tarpit matapōkeretia (1–5 hēkona mā te taunoa, kua herea-kaha ki te 15 hēkona) hei whakaroa i ngā kaiwhakaeke

Whirihoranga

Wātaka Tarpit

Whakahaerehia te whakaroanga matapōkeretia ka hoatu ki ngā tono kua whakawhāitihia te auau:

  • cap_rate_limit_tarpit_min — Roanga moe mōkito i ngā hēkona (taunoa: 1)
  • cap_rate_limit_tarpit_max — Roanga moe mōrahi i ngā hēkona (taunoa: 5, kua herea-kaha ki te 15)

Kei te wātea ēnei tautuhinga i Ultimate Multisite → Settings → Captcha.

Whakawhānuitanga

Tātari Rārangi-mā IP

Whakawāteatia ngā awhe IP whirinaki i te whakawhāiti auau:

add_filter( 'wu_cap_rate_limit_whitelist_ip', function( $is_whitelisted, $ip ) {
// Whitelist your monitoring service
if ( $ip === '203.0.113.42' ) {
return true;
}
return $is_whitelisted;
}, 10, 2 );

Hohenga I mua i te Aukatinga

Whakahaerehia he arorau ritenga i mua tonu i te tukunga o tētahi aukatinga tepenga-auau:

add_action( 'wu_cap_rate_limit_will_block', function( $ip, $surface ) {
// Log the block, notify admins, or update custom metrics
error_log( "Rate limit triggered for $ip on $surface" );
}, 10, 2 );

Rapunga IP Kiritaki me ngā Takawaenga Whirinaki

Ka whakauru a Ultimate Multisite: Captcha v1.5.0 i te rapunga IP-kiritaki ātete-whakapohehe. Ko te aratuka Captcha_Core::get_client_ip() ināianei te puna pono kotahi mō te tautuhi IP manuhiri puta noa i:

  • Ngā kī kete rate-limit
  • Kaiwhakarato Captcha remoteip (reCAPTCHA, hCaptcha siteverify)
  • Ngā hash IP tatauranga

Tauira Whirinaki

Ka whakaū te monomai i tētahi arapiki whirinaki IP tino pūmau:

  1. REMOTE_ADDR — Ka whirinakitia i ngā wā katoa (te IP o te hoa tata tonu)
  2. CF-Connecting-IP — Ka whai mana anake ina:
    • Kei roto te hoa tata tonu i tētahi awhe IP Cloudflare o nāianei
    • Kua whakahohea cap_trust_cloudflare_headers (taunoa: WETO)
  3. X-Forwarded-For — Ka whai mana anake ina:
    • Kei roto te hoa tata tonu i tō rārangi trusted-proxy kua whirihorahia e te kaiwhakahaere
    • Ka wetewetehia te header mai matau ki mauī, me te peke i ngā peke trusted/Cloudflare

Whirihoranga

Whirinaki Header Cloudflare

Whakahohea te whirinaki ki te header CF-Connecting-IP a Cloudflare:

  • cap_trust_cloudflare_headers — Tautuhia ki ON kia uru ki te whirinaki CF-Connecting-IP
    • Taunoa: OFF (kua monokia)
    • Ka tukuna mai te monomai me tētahi whakaahua CIDR Cloudflare kua whakaurua
    • Ka whakahoutia ngā awhe CIDR ia wiki mā wp-cron
    • Ka whakamahia te kōwhiringa hoki kua whakaurua mēnā ka rahua te whakahou

Whirihoranga Takawaenga Whirinaki

Tautuhia ō takawaenga rārangi-mua me ō load-balancers:

  • cap_trusted_proxies — Textarea o ngā CIDR, o ngā IP kau rānei (kotahi ia rārangi)
    • Ka whakaaetia ngā tākupu (ngā rārangi e tīmata ana ki #)
    • Ki te kore tēnei tautuhinga, ka warewarehia X-Forwarded-For ahakoa kua whakahohea te rate limiter
    • Tauira:
      # Our load balancer
      192.0.2.0/24

      # Backup proxy
      198.51.100.50

Kite-Aunoa i te Whakahohe-Tuatahi

Ina whakahohe tuatahi koe i te rate limiter, ka kite te monomai i tō āhua Cloudflare me tō āhua takawaenga pea, ā, ka whakaatu i tētahi whakamōhiotanga kaiwhakahaere pāwhiri-kotahi "Hoatu ngā tautuhinga kua kitea".

  • Kāore rawa te monomai e tuhirua i ō uara kua tiakina
  • Mēnā ka tohu ngā hokohoko whai muri kua kore tō whirihoranga e hāngai ki te tino āhuatanga (hei tauira, kua huri a Cloudflare i ngā awhe CIDR), ka puta ake tētahi whakamōhiotanga rerekētanga kāore e taea te whakakore, e whakaatu ana i te whakahou e taunakitia ana

He Aha i Hirahira ai Tēnei

Ka kati tētahi tauira whirinaki IP tino pūmau i tētahi ara rūpahu nui: ko ngā tono tika ki te origin-server e kawe ana i tētahi header CF-Connecting-IP rūpahu, i mua, kua whakaketea mā te IP rūpahu kē, kaua mā te hoa tūturu. He mea tino hirahira tēnei mō:

  • Whakawhāiti tere — Kāore e taea e ngā kaikōkiri te karo i ngā tepenga mā te rūpahu IP
  • Tatauranga — Ka whakaata ō inenga whakaeke i ngā IP manuhiri tūturu, kaua ko ngā mea rūpahu
  • Manatokonga Captcha — Ka whiwhi ngā kaiwhakarato i te IP manuhiri tika mō te aromatawai tūraru