Skip to main content
Paid AddonPurchase Captcha | Install via your site's addon page or download from your account

Captcha

Hagarika Bots. Rinda Inyungu. Nta Mihangayiko y'Igenamiterere.

Ukora umuyoboro wa multisite ufite domains zihariye? Uzi ububabare: Google reCAPTCHA na hCaptcha bigusaba kwandikisha buri domain yose muri admin console yabo. Wongeyeho site y'umukiriya mushya? Vugurura igenamiterere rya captcha. Uhuje domain yihariye? Ongera uvugurure. Ntibirangira.

Ultimate Multisite: Captcha ihindura byose.

Cap Captcha: Uburinzi Wicumbikira Bukora Ako Kanya​

Provider yacu nshya ya Cap Captcha ni impinduramikorere ku miyoboro ya multisite:

  • Nta Genamiterere — Kora addon kandi urarinzwe. Nta API keys, nta Google account, nta hCaptcha dashboard, nta kwemerera domains.
  • Ikora Kuri Buri Domain mu Buryo Bwikora — Subdomains, domains zahujwe, domains z'abakiriya—zose zirindwa ako kanya.
  • Wicumbikira & Yigenga — Amakuru yawe ntava kuri server yawe. Yubahiriza GDPR byuzuye nta gukurikirana kw'abandi bantu.
  • Invisible Proof-of-Work — Abakoresha bakemura umukoro w'imibare inyuma. Nta gukanda ibyuma bizimya umuriro, nta grids z'amashusho zibabaza.
  • Yoroheje — 20KB gusa. Ntizadindiza checkout yawe.

Uburinzi bwa WooCommerce ku Kugerageza Amakarita​

Ibitero byo kugerageza amakarita bitwara abacuruzi miliyari buri mwaka. Abatekamutwe bakoresha bots kugenzura amakarita y'inguzanyo yibwe kuri WooCommerce checkout yawe—wishyura amafaranga yo gutunganya, bo bakabona nimero z'amakarita zemewe.

Turinda aho bifite akamaro kurusha ahandi:

  • Uburinzi bwa Store API — Buhagarika ibitero bya bots kuri /wp-json/wc/store/v1/checkout bisimbuka captchas zisanzwe z'ifishi
  • Bihura na PayPal Payments — Bikora neza na WooCommerce PayPal Payments
  • Imibare y'Igihe Nyacyo — Reba neza umubare w'ibitero urimo guhagarika

Uracyakeneye Google reCAPTCHA cyangwa hCaptcha?​

Turakwitayeho. Inkunga yuzuye kuri:

  • Google reCAPTCHA v2 (Checkbox)
  • Google reCAPTCHA v2 (Invisible)
  • Google reCAPTCHA v3 (Ishingiye ku manota)
  • hCaptcha (Standard)
  • hCaptcha (Invisible)

Hindura providers igihe icyo ari cyo cyose uhereye ku igenamiterere ry'umuyoboro wawe.

Yubatswe ku Rugero Runini​

  • Igenamiterere ryo ku rwego rw'umuyoboro hamwe n'ibishobora guhindurwa kuri buri site
  • Dashboard y'imibare yo kugenzura uburinzi
  • Inzego z'umutekano zishobora guhindurwa (Yihuta, Hagati, Ntarengwa)
  • Yorohereza abateza imbere hamwe n'ubwubatsi bwa provider bushobora kwagurwa

Kwishyiramo​

  1. Shyira ultimate-multisite-captcha muri directory yawe ya /wp-content/plugins/
  2. Network Activate plugin
  3. Ni ibyo. Urarinzwe.

Cap Captcha ikora mu buryo bwikora—nta igenamiterere ryo gutunganya, nta API keys zo kwinjiza. Buri endpoint ishyigikiwe mu muyoboro wawe wose irindwa ako kanya ukimara kuyikora.

By'ubushake: Kugira ngo ukoreshe Google reCAPTCHA cyangwa hCaptcha aho kuyikoresha, jya kuri Ultimate Multisite → Settings → Captcha maze uhitemo provider ukunda.

Ibibazo Bikunze Kubazwa​

Ese nkeneye kugira icyo ntunganya?​

Oya! Cap Captcha ishobozwa mu buryo bwikora iyo ukoze addon. Umuyoboro wawe wose urindwa ako kanya—nta igenamiterere ryo gutunganya, nta API keys zo kwinjiza.

Ese nkeneye API keys kuri Cap Captcha?​

Oya. Cap Captcha yicumbikirwa ku buryo bwuzuye. Nta accounts zo hanze, nta kwandikisha domain, nta mihangayiko y'igenamiterere.

Ese ibi bizadindiza checkout yanjye?​

Cap Captcha ni 20KB gusa kandi ikoresha ibibazo bya proof-of-work inyuma. Abakiriya bawe ntibazabona ubukererwe na buke.

Ese ibi birinda ibitero byo kugerageza amakarita?​

Yego! Bitandukanye na captchas zisanzwe zirinda gusa amafishi ya HTML, ihuzwa ryacu rya WooCommerce ryihuza neza na Store API kugira ngo rihagarike ibitero bya bots ku rwego rwa API—aho ibitero byinshi byo kugerageza amakarita bibera.

Nshobora gukoresha providers ba captcha batandukanye kuri sites zitandukanye?​

Provider wa captcha ashyirwaho ku rwego rw'umuyoboro wose, ariko ushobora guhindura igenamiterere ry'ubukomere ukurikije ibyo ukeneye.

Ese ibi byubahiriza GDPR?​

Cap Captcha yicumbikirwa 100% nta makuru yoherezwa kuri serivisi zo hanze. Kuri Google reCAPTCHA na hCaptcha, nyamuneka suzuma politiki zabo z'ibanga zibareba.

Kugabanya Igipimo​

Ultimate Multisite: Captcha v1.5.0 izana rate limiter ihagarika burundu irinda umuyoboro wawe ibitero bya brute-force n'ibyo kugerageza amakarita.

Uko Bikora​

Rate limiter ibara buri busabe bwa GET na POST ku bice birinzwe na captcha:

  • WordPress login endpoints — wp-login, register, lost-password, comments
  • WooCommerce checkout — my-account, checkout, pay-for-order
  • Ultimate Multisite — checkout, inline-login

Iyo umushyitsi arenze rate limit, plugin isubiza na:

  • HTTP 429 (Too Many Requests) status code
  • Retry-After header yerekana igihe cyo kongera kugerageza
  • Gusinzira kwa tarpit gutoranywa ku buryo butunguranye (amasegonda 1–5 ku busanzwe, bigarukira by'itegeko ku masegonda 15) kugira ngo bidindize abagabye ibitero

Igenamiterere​

Igihe cya Tarpit​

Genzura ubukererwe butoranywa ku buryo butunguranye bushyirwa ku busabe bwageze kuri rate limit:

  • cap_rate_limit_tarpit_min — Igihe gito cyo gusinzira mu masegonda (igisanzwe: 1)
  • cap_rate_limit_tarpit_max — Igihe kinini cyo gusinzira mu masegonda (igisanzwe: 5, bigarukira by'itegeko kuri 15)

Aya magenamiterere aboneka muri Ultimate Multisite → Settings → Captcha.

Kwagurwa​

IP Whitelist Filter​

Kuraho IP ranges zizewe muri rate limiting:

add_filter( 'wu_cap_rate_limit_whitelist_ip', function( $is_whitelisted, $ip ) {
    // Whitelist your monitoring service
    if ( $ip === '203.0.113.42' ) {
        return true;
    }
    return $is_whitelisted;
}, 10, 2 );

Igikorwa cya Mbere yo Guhagarika​

Koresha logique yihariye ako kanya mbere y'uko block ya rate-limit yoherezwa:

add_action( 'wu_cap_rate_limit_will_block', function( $ip, $surface ) {
    // Log the block, notify admins, or update custom metrics
    error_log( "Rate limit triggered for $ip on $surface" );
}, 10, 2 );

Kumenya IP y'Umukiriya & Proxies Zizewe​

Ultimate Multisite: Captcha v1.5.0 izana kumenya client-IP kudashobora kubeshywa. Uburyo bwa Captcha_Core::get_client_ip() ubu ni isoko imwe y'ukuri ku kumenya IP y'umushyitsi muri:

  • Imfunguzo za bucket za rate-limit
  • Utanga Captcha remoteip (reCAPTCHA, hCaptcha siteverify)
  • Hash za IP z’imibare y’ibarurishamibare

Uburyo bwo Kugena Icyizere​

Iyi plugin ishyiraho urwego rukomeye rw’icyizere cya IP:

  1. REMOTE_ADDR — Izerwa buri gihe (IP y’uwo bihita bihura)
  2. CF-Connecting-IP — Yubahirizwa gusa iyo:
    • Uwo bihita bihura ari muri range ya Cloudflare IP iriho ubu
    • cap_trust_cloudflare_headers ifunguye (isanzwe: OFF)
  3. X-Forwarded-For — Yubahirizwa gusa iyo:
    • Uwo bihita bihura ari mu rutonde rwawe rwashyizweho na admin rwa proxy zizewe
    • Header isesengurwa uhereye iburyo ujya ibumoso, usimbuka hops zizewe/za Cloudflare

Iboneza​

Icyizere cya Cloudflare Header​

Fungura icyizere cya header ya Cloudflare CF-Connecting-IP:

  • cap_trust_cloudflare_headers — Shyira kuri ON kugira ngo wemere icyizere cya CF-Connecting-IP
    • Isanzwe: OFF (ifunze)
    • Iyi plugin izana snapshot ya Cloudflare CIDR irimo
    • Range za CIDR zivugururwa buri cyumweru binyuze kuri wp-cron
    • Fallback irimo ikoreshwa iyo ivugurura ryananiwe

Iboneza rya Proxy Yizewe​

Sobanura proxy zawe z’imbere na load-balancers:

  • cap_trusted_proxies — Textarea ya CIDR cyangwa IP zisanzwe (imwe kuri buri murongo)
    • Comments ziremewe (imirongo itangirwa na #)
    • Hatari iri genamiterere, X-Forwarded-For irirengagizwa n’iyo rate limiter yaba ifunguye
    • Urugero: 
      # Our load balancer
      192.0.2.0/24

      # Backup proxy
      198.51.100.50

Kumenya Byikora ku Nshuro ya Mbere yo Gufungura​

Iyo ufunguye rate limiter bwa mbere, iyi plugin imenya uko ushobora kuba ukoresha Cloudflare na proxy, maze ikerekana admin notice ya "Apply detected settings" ikanda rimwe.

  • Iyi plugin ntizigera isimbuza values wabitse
  • Niba traffic ikurikiyeho igaragaje ko config yawe itakijyanye n’ukuri (urugero, Cloudflare yahinduye range za CIDR), notice y’ukudahuza idashobora gufungwa izagaragaza ivugurura risabwa

Impamvu Ibi ari Ingenzi​

Uburyo bukomeye bwo kugena icyizere cya IP bufunga icyuho gikomeye cyo kwiyitirira: requests zijya kuri origin-server mu buryo butaziguye zifite header CF-Connecting-IP mpimbano mbere zashyirwaga muri bucket hakurikijwe IP mpimbano aho kuba uwo bihita bihura nyakuri. Ibi ni ingenzi cyane kuri:

  • Rate limiting — Abagaba ibitero ntibashobora kurenga limits biyitirira IP
  • Imibare y’ibarurishamibare — Metrics z’ibitero byawe zigaragaza IP z’abashyitsi nyakuri, si iz’impimbano
  • Kugenzura Captcha — Providers bakira IP y’umushyitsi nyakuri kugira ngo basuzume ibyago