Skip to main content
Paid AddonPurchase Captcha | Install via your site's addon page or download from your account

Captcha

Emisa Bots. Sireletsa Lekeno. Ha ho Bothata ba Tlhophiso.

O tsamaisa marangrang a multisite ka domains tse ikgethileng? O tseba bohloko bona: Google reCAPTCHA le hCaptcha di hloka hore o ngodise domain e nngwe le e nngwe ka hara console ya bona ya tsamaiso. O kenya sebaka se setjha sa moreki? Ntjhafatsa tlhophiso ya captcha. O mapela domain e ikgethileng? Ntjhafatsa hape. Ha ho mohla ho felang.

Ultimate Multisite: Captcha e fetola tsohle.

Cap Captcha: Tshireletso e Itshwaretsweng e Sebetsang Feela​

Mofani wa rona e motjha wa Cap Captcha o fetola papadi bakeng sa marangrang a multisite:

  • Ha ho Tlhophiso — Kenya tshebetsong addon mme o sireleditswe. Ha ho API keys, ha ho Google account, ha ho hCaptcha dashboard, ha ho ho whitelist domains.
  • E Sebetsa ho Domain e Nngwe le e Nngwe ka Boiketsetso — Subdomains, mapped domains, domains tsa bareki—tsohle di sireleditswe hanghang.
  • E Itshwaretswe & ke ya Poraefete — Data ya hao ha e tlohe server ya hao le ka mohla. E dumellana ka botlalo le GDPR ntle le ho sala morao ke mokgatlo wa boraro.
  • Proof-of-Work e sa Bonahaleng — Basebedisi ba rarolla phazele ya khomphutha ka morao. Ha ho ho tobetsa di-hydrant tsa mollo, ha ho di-grid tsa ditshwantsho tse tenehang.
  • E Bobebe — Ke 20KB feela. E ke ke ya fokotsa lebelo la checkout ya hao.

Tshireletso ya WooCommerce Card Testing​

Ditlhaselo tsa card testing di jella bahwebi dibilione selemo le selemo. Baqhekelli ba sebedisa bots ho netefatsa dikarete tsa mokitlane tse utswitsweng kgahlanong le WooCommerce checkout ya hao—o lefa ditefiso tsa tshebetso, bona ba fumana dinomoro tsa dikarete tse sebetsang.

Re sireletsa moo ho leng bohlokwa ka ho fetisisa:

  • Tshireletso ya Store API — E thibela ditlhaselo tsa bot ho /wp-json/wc/store/v1/checkout tse qobang di-captcha tsa foromo tsa setso
  • E Tsamaellana le PayPal Payments — E sebetsa ka boreledi le WooCommerce PayPal Payments
  • Dipalopalo tsa Nako ya Nnete — Bona hantle hore na o thibela ditlhaselo tse kae

O sa Hloka Google reCAPTCHA kapa hCaptcha?​

Re o lokiseditse. Tshehetso e felletseng bakeng sa:

  • Google reCAPTCHA v2 (Checkbox)
  • Google reCAPTCHA v2 (Invisible)
  • Google reCAPTCHA v3 (Score-based)
  • hCaptcha (Standard)
  • hCaptcha (Invisible)

Fetola bafani neng kapa neng ho tswa ho disetting tsa marangrang a hao.

E Ahilwe bakeng sa Sekala se Seholo​

  • Disetting tsa marangrang ohle ka diphetoho tsa sebaka ka seng
  • Dashboard ya dipalopalo ho lekola tshireletso
  • Maemo a tshireletso a fetolehang (Potlakile, Mahareng, Hodimo ka ho Fetisisa)
  • E loketse baetsi ka sebopeho sa mofani se atolosehang

Ho Kenya​

  1. Kenya ultimate-multisite-captcha ho directory ya hao ya /wp-content/plugins/
  2. Kenya tshebetsong plugin ho Network
  3. Ke phetho. O sireleditswe.

Cap Captcha e kena tshebetsong ka boiketsetso—ha ho disetting tseo o lokelang ho di hlophisa, ha ho API keys tseo o lokelang ho di kenya. Endpoint e nngwe le e nngwe e tshehetswang ho pholletsa le marangrang ohle a hao e sireleditswe motsotsong oo o kenyang tshebetsong.

Boikgethelo: Ho sebedisa Google reCAPTCHA kapa hCaptcha ho e-na le hoo, ya ho Ultimate Multisite → Settings → Captcha mme o kgethe mofani eo o mo ratang.

Dipotso Tse Botswang Hangata​

Na ke hloka ho hlophisa letho?​

Tjhe! Cap Captcha e buletswe ka boiketsetso ha o kenya tshebetsong addon. Marangrang ohle a hao a sireleditswe hanghang—ha ho disetting tseo o lokelang ho di hlophisa, ha ho API keys tseo o lokelang ho di kenya.

Na ke hloka API keys bakeng sa Cap Captcha?​

Tjhe. Cap Captcha e itshwaretswe ka botlalo. Ha ho di-account tsa kantle, ha ho ngodiso ya domain, ha ho mathata a tlhophiso.

Na see se tla fokotsa lebelo la checkout ya ka?​

Cap Captcha ke 20KB feela mme e tsamaisa diphephetso tsa proof-of-work ka morao. Bareki ba hao ba ke ke ba hlokomela tieho efe kapa efe.

Na see se sireletsa kgahlanong le ditlhaselo tsa card testing?​

E! Ho fapana le di-captcha tsa setso tse sireletsang diforomo tsa HTML feela, kopanyo ya rona ya WooCommerce e hokahana ka kotloloho le Store API ho thibela ditlhaselo tsa bot boemong ba API—moo ditlhaselo tse ngata tsa card testing di etsahalang teng.

Na nka sebedisa bafani ba fapaneng ba captcha dibakeng tse fapaneng?​

Mofani wa captcha o behwa bakeng sa marangrang ohle, empa o ka fetola disetting tsa bothata ho ya ka ditlhoko tsa hao.

Na see se dumellana le GDPR?​

Cap Captcha e itshwaretswe ka 100% ntle le data e romelwang ditshebeletsong tsa kantle. Bakeng sa Google reCAPTCHA le hCaptcha, ka kopo lekola maano a bona a poraefete a fapaneng.

Ho Beha Moedi wa Sekgahla​

Ultimate Multisite: Captcha v1.5.0 e hlahisa rate limiter ya ho emisa ka thata e sireletsang marangrang a hao kgahlanong le brute-force le ditlhaselo tsa card-testing.

Kamoo e Sebetsang Kateng​

Rate limiter e bala kopo e nngwe le e nngwe ya GET le POST hodima dibaka tse sireleditsweng ke captcha:

  • WordPress login endpoints — wp-login, register, lost-password, comments
  • WooCommerce checkout — my-account, checkout, pay-for-order
  • Ultimate Multisite — checkout, inline-login

Ha moeti a feta rate limit, plugin e araba ka:

  • HTTP 429 (Dikopo Tse Ngata Haholo) status code
  • Retry-After header e bontshang hore na ho leke hape neng
  • Boroko ba tarpit bo kgethilweng ka tshohanyetso (metsotswana e 1–5 ka boikgethelo, bo lekanyeditswe ka thata ho metsotswana e 15) ho fokotsa lebelo la bahlaseli

Tlhophiso​

Nako ya Tarpit​

Laola tieho e kgethilweng ka tshohanyetso e sebediswang ho dikopo tse behilweng moedi wa sekgahla:

  • cap_rate_limit_tarpit_min — Nako e nyenyane ya boroko ka metsotswana (ya kamehla: 1)
  • cap_rate_limit_tarpit_max — Nako e kgolo ya boroko ka metsotswana (ya kamehla: 5, e lekanyeditswe ka thata ho 15)

Disetting tsena di fumaneha ho Ultimate Multisite → Settings → Captcha.

Ho Atoloswa​

Sefe ya IP Whitelist​

Lokolla meedi ya IP e tshepehang ho rate limiting:

add_filter( 'wu_cap_rate_limit_whitelist_ip', function( $is_whitelisted, $ip ) {
    // Whitelist your monitoring service
    if ( $ip === '203.0.113.42' ) {
        return true;
    }
    return $is_whitelisted;
}, 10, 2 );

Ketso ya Pele ho Thibelo​

Phetha logic e ikgethileng hanghang pele block ya rate-limit e romelwa:

add_action( 'wu_cap_rate_limit_will_block', function( $ip, $surface ) {
    // Log the block, notify admins, or update custom metrics
    error_log( "Rate limit triggered for $ip on $surface" );
}, 10, 2 );

Ho Fumana IP ya Client & Proxies tse Tshepehang​

Ultimate Multisite: Captcha v1.5.0 e hlahisa phumano ya client-IP e hananang le spoofing. Mokgwa wa Captcha_Core::get_client_ip() jwale ke mohlodi o le mong wa nnete bakeng sa kabo ya IP ya moeti ho pholletsa le:

  • Linotlolo tsa dibakete tsa moedi wa sekgahla
  • Mofani wa Captcha remoteip (reCAPTCHA, hCaptcha siteverify)
  • Di-hash tsa IP tsa dipalopalo

Mohlala wa Tshepo​

Sekenyo se qobella tatellano e thata ya tshepo ya IP:

  1. REMOTE_ADDR — E tshepahala kamehla (IP ya thaka ya hanghang)
  2. CF-Connecting-IP — E hlomphuwa feela ha:
    • Thaka ya hanghang e le kahare ho sebaka sa hajwale sa IP sa Cloudflare
    • cap_trust_cloudflare_headers e dumelletswe (ya kamehla: TIMME)
  3. X-Forwarded-For — E hlomphuwa feela ha:
    • Thaka ya hanghang e le lenaneng la hao la diproxy tse tshepilweng tse hlophisitsweng ke motsamaisi
    • Header e balwa ho tloha ho le letona ho ya ho le letshehadi, ho tlolwa mehato ya diproxy tse tshepilweng/Cloudflare

Tlhophiso​

Tshepo ya Header ya Cloudflare​

Dumella tshepo ya header ya Cloudflare ya CF-Connecting-IP:

  • cap_trust_cloudflare_headers — E behe ho ON ho kgetha ho kena tshepong ya CF-Connecting-IP
    • Ya kamehla: OFF (e thibetswe)
    • Sekenyo se tla le snapshot ya Cloudflare CIDR e kenyelleditsweng
    • Dibaka tsa CIDR di ntjhafatswa beke le beke ka wp-cron
    • Mokgwa wa fallback o kenyelleditsweng o sebediswa haeba ntjhafatso e hloleha

Tlhophiso ya Proxy e Tshepilweng​

Hlalosa diproxy le di-load-balancer tsa hao tsa moleng o ka pele:

  • cap_trusted_proxies — Sebaka sa mongolo sa di-CIDR kapa di-IP tse se nang sephuthelo (e le nngwe moleng ka mong)
    • Ditlhaloso di dumelletswe (mela e qalang ka #)
    • Ntle le setlhophiso sena, X-Forwarded-For e a hlokomolohwa le ha sekgina sa moedi wa sekgahla se dumelletswe
    • Mohlala: 
      # Our load balancer
      192.0.2.0/24

      # Backup proxy
      198.51.100.50

Ho Iphumantsha ha ho Dumellwa Lekgetlo la Pele​

Ha o qala ho dumella sekgina sa moedi wa sekgahla, sekenyo se fumana boemo ba hao bo ka etsahalang ba Cloudflare le proxy mme se bontsha tsebiso ya motsamaisi ya tobetswang hanngwe "Sebedisa disetting tse fumanweng".

  • Sekenyo ha se ke se ngola hodima boleng ba hao bo bolokilweng
  • Haeba sephethephethe se latelang se fana ka maikutlo a hore config ya hao ha e sa tsamaisana le nnete (mohl., Cloudflare e fetotse dibaka tsa CIDR), tsebiso ya ho se tshwane e sa tlosweng e hlahisa ntjhafatso e kgothaletswang

Hobaneng Sena se le Bohlokwa​

Mohlala o thata wa tshepo ya IP o kwala tsela e kotsi ya spoofing: dikopo tse tobileng tsa seva ya mohlodi tse nkileng header ya CF-Connecting-IP e qapilweng pele di ka be di kentswe ka baketeng ho latela IP e qapilweng ho ena le thaka ya nnete. Sena se bohlokwa haholo bakeng sa:

  • Ho beha moedi wa sekgahla — Bahlaseli ba ke ke ba qoba meedi ka ho qapa di-IP
  • Dipalopalo — Ditekanyo tsa hao tsa tlhaselo di bontsha di-IP tsa baeti ba nnete, eseng tse qapilweng
  • Netefatso ya Captcha — Bafani ba amohela IP e nepahetseng ya moeti bakeng sa tekolo ya kotsi