Skip to main content
Paid AddonPurchase Captcha | Install via your site's addon page or download from your account

Captcha

Misa ama-Bot. Vikela Imali Engenayo. Akukho Kuhlupheka Kokumisa.

Usebenzisa inethiwekhi ye-multisite enamadomain enziwe ngokwezifiso? Uyabazi ubuhlungu: Google reCAPTCHA ne-hCaptcha zidinga ukuthi ubhalise idomain ngayinye ku-admin console yazo. Ungeza isayithi lekhasimende elisha? Buyekeza ukumiswa kwe-captcha. Uxhumanisa idomain eyenziwe ngokwezifiso? Buyekeza futhi. Akupheli.

Ultimate Multisite: Captcha ishintsha konke.

Cap Captcha: Ukuvikelwa Okuzisingathwayo Okusebenza Kalula​

Umhlinzeki wethu omusha we-Cap Captcha uyinto eshintsha umdlalo kumanethiwekhi e-multisite:

  • Akukho Ukumisa — Vula i-addon futhi usuvikelekile. Azikho izikhiye ze-API, ayikho i-akhawunti ye-Google, ayikho i-dashboard ye-hCaptcha, akukho ukufaka amadomain ohlwini olumhlophe.
  • Isebenza Kuwo Wonke Amadomain Ngokuzenzakalelayo — Ama-subdomain, amadomain axhunyiwe, amadomain amakhasimende—wonke avikeleka ngokushesha.
  • Kuzisingathwa Wena & Kuyimfihlo — Idatha yakho ayikaze ishiye iseva yakho. Ihambisana ngokuphelele ne-GDPR ngaphandle kokulandelela okuvela ezinkampanini zangaphandle.
  • Ubufakazi Bomsebenzi Obungabonakali — Abasebenzisi baxazulula iphazili yokubala ngemuva. Akukho ukuchofoza ama-fire hydrants, akukho magridi ezithombe akhungathekisayo.
  • Ilula — 20KB kuphela. Ngeke yehlise ijubane le-checkout yakho.

Ukuvikelwa Kokuhlolwa Kwamakhadi kwe-WooCommerce​

Ukuhlasela kokuhlolwa kwamakhadi kubiza abathengisi izigidigidi minyaka yonke. Abakhohlisi basebenzisa ama-bot ukuqinisekisa amakhadi esikweletu antshontshiwe ku-checkout yakho ye-WooCommerce—wena ukhokha izimali zokucubungula, bona bathola izinombolo zamakhadi ezisebenzayo.

Sivikela lapho kubaluleke khona kakhulu:

  • Ukuvikelwa kwe-Store API — Kuvimba ukuhlasela kwama-bot ku-/wp-json/wc/store/v1/checkout okwedlula ama-captcha amafomu ajwayelekile
  • Iyahambisana ne-PayPal Payments — Isebenza ngokushelelayo ne-WooCommerce PayPal Payments
  • Izibalo Zesikhathi Sangempela — Bona ngqo ukuthi zingaki izihlaselo ozivimbayo

Usadinga i-Google reCAPTCHA noma i-hCaptcha?​

Sikuhlinzekile. Ukusekelwa okuphelele kwe:

  • Google reCAPTCHA v2 (Checkbox)
  • Google reCAPTCHA v2 (Invisible)
  • Google reCAPTCHA v3 (Score-based)
  • hCaptcha (Standard)
  • hCaptcha (Invisible)

Shintsha phakathi kwabahlinzeki noma nini kuzilungiselelo zenethiwekhi yakho.

Yakhelwe Isikali Esikhulu​

  • Izilungiselelo zenethiwekhi yonke ezinezinketho zokushintsha ngesayithi ngalinye
  • I-dashboard yezibalo yokuqapha ukuvikelwa
  • Amazinga okuphepha alungisekayo (Okusheshayo, Okumaphakathi, Okuphezulu)
  • Ilungele abathuthukisi ngesakhiwo sabahlinzeki esinwebekayo

Ukufaka​

  1. Layisha ultimate-multisite-captcha kudayirekthri yakho ye-/wp-content/plugins/
  2. Yenza i-plugin isebenze ku-Network
  3. Yilokho kuphela. Usuvikelekile.

I-Cap Captcha isebenza ngokuzenzakalelayo—azikho izilungiselelo zokumisa, azikho izikhiye ze-API zokufaka. Yonke i-endpoint esekelwayo kuyo yonke inethiwekhi yakho ivikelekile ngomzuzu oyivulayo.

Ongakukhetha: Ukuze usebenzise i-Google reCAPTCHA noma i-hCaptcha esikhundleni salokho, iya ku-Ultimate Multisite → Settings → Captcha bese ukhetha umhlinzeki omthandayo.

Imibuzo Evame Ukubuzwa​

Ingabe kudingeka ngimise okuthile?​

Cha! I-Cap Captcha inikwa amandla ngokuzenzakalelayo lapho uvula i-addon. Yonke inethiwekhi yakho ivikeleka ngokushesha—azikho izilungiselelo zokumisa, azikho izikhiye ze-API zokufaka.

Ingabe ngidinga izikhiye ze-API ze-Cap Captcha?​

Cha. I-Cap Captcha izisingathwa ngokuphelele wena. Azikho ama-akhawunti angaphandle, akukho ukubhaliswa kwamadomain, akukho zinhlungu zokumisa.

Ingabe lokhu kuzonciphisa ijubane le-checkout yami?​

I-Cap Captcha ingu-20KB kuphela futhi isebenzisa izinselelo zobufakazi bomsebenzi ngemuva. Amakhasimende akho ngeke aqaphele noma yikuphi ukubambezeleka.

Ingabe lokhu kuvikela ekuhlaselweni kokuhlolwa kwamakhadi?​

Yebo! Ngokungafani nama-captcha ajwayelekile avikela kuphela amafomu e-HTML, ukuhlanganiswa kwethu kwe-WooCommerce kuxhuma ngqo ku-Store API ukuvimba ukuhlasela kwama-bot ezingeni le-API—lapho ukuhlasela okuningi kokuhlolwa kwamakhadi kwenzeka khona.

Ngingakwazi ukusebenzisa abahlinzeki be-captcha abahlukene kumasayithi ahlukene?​

Umhlinzeki we-captcha usethwa kunethiwekhi yonke, kodwa ungakwazi ukulungisa izilungiselelo zobunzima ngokwezidingo zakho.

Ingabe lokhu kuhambisana ne-GDPR?​

I-Cap Captcha izisingathwa wena ngo-100% ngaphandle kwedatha ethunyelwa ezinsizeni zangaphandle. Ku-Google reCAPTCHA ne-hCaptcha, sicela ubuyekeze izinqubomgomo zabo zobumfihlo ezifanele.

Ukukhawulela Izinga​

Ultimate Multisite: Captcha v1.5.0 yethula isikhawuleli sezinga esimisa ngokuphelele esivikela inethiwekhi yakho ekuhlaselweni kwe-brute-force nokuhlolwa kwamakhadi.

Isebenza Kanjani​

Isikhawuleli sezinga sibala zonke izicelo ze-GET ne-POST ezindaweni ezivikelwe nge-captcha:

  • Ama-endpoint okungena e-WordPress — wp-login, register, lost-password, comments
  • I-checkout ye-WooCommerce — my-account, checkout, pay-for-order
  • Ultimate Multisite — checkout, inline-login

Lapho isivakashi sedlula umkhawulo wezinga, i-plugin iphendula nge:

  • HTTP 429 (Izicelo Eziningi Kakhulu) ikhodi yesimo
  • Retry-After header ekhombisa ukuthi kuphindwe nini ukuzama
  • Ukulala kwe-tarpit okungahleliwe (imizuzwana engu-1–5 ngokuzenzakalelayo, kukhawulelwe ngokuqinile kumizuzwana engu-15) ukuze kubambezele abahlaseli

Ukumiswa​

Isikhathi se-Tarpit​

Lawula ukubambezeleka okungahleliwe okusetshenziswa ezicelweni ezikhawulelwe ngezinga:

  • cap_rate_limit_tarpit_min — Ubude obuncane bokulala ngemizuzwana (okuzenzakalelayo: 1)
  • cap_rate_limit_tarpit_max — Ubude obukhulu bokulala ngemizuzwana (okuzenzakalelayo: 5, kukhawulelwe ngokuqinile ku-15)

Lezi zilungiselelo ziyatholakala ku-Ultimate Multisite → Settings → Captcha.

Ukunwebeka​

Isihlungi Sohlu Olumhlophe lwe-IP​

Khipha amabanga e-IP athembekile ekukhawulelweni kwezinga:

add_filter( 'wu_cap_rate_limit_whitelist_ip', function( $is_whitelisted, $ip ) {
    // Whitelist your monitoring service
    if ( $ip === '203.0.113.42' ) {
        return true;
    }
    return $is_whitelisted;
}, 10, 2 );

Isenzo Sangaphambi Kokuvimba​

Sebenzisa ilogic eyenziwe ngokwezifiso ngokushesha ngaphambi kokuthi ukuthunyelwa kokuvimba komkhawulo wezinga kuthunyelwe:

add_action( 'wu_cap_rate_limit_will_block', function( $ip, $surface ) {
    // Log the block, notify admins, or update custom metrics
    error_log( "Rate limit triggered for $ip on $surface" );
}, 10, 2 );

Ukutholwa kwe-IP Yeklayenti & Ama-Proxy Athembekile​

Ultimate Multisite: Captcha v1.5.0 yethula ukutholwa kwe-client-IP okumelana nokukhohlisa. Indlela ye-Captcha_Core::get_client_ip() manje iwumthombo owodwa weqiniso wokuchaza i-IP yesivakashi kuyo yonke:

  • Okhiye bamaqoqo omkhawulo wezinga
  • Umhlinzeki we-Captcha remoteip (reCAPTCHA, hCaptcha siteverify)
  • Ama-hash e-IP wezibalo

Imodeli Yokuthembana​

I-plugin iphoqelela isikhundla esiqinile sokuthembela kwe-IP:

  1. REMOTE_ADDR — Ihlala ithembekile (i-IP yomlingani oseduze)
  2. CF-Connecting-IP — Ihlonishwa kuphela lapho:
    • Umlingani oseduze engaphakathi kwebanga lamanje le-IP le-Cloudflare
    • cap_trust_cloudflare_headers inikwe amandla (okuzenzakalelayo: KUVALIWE)
  3. X-Forwarded-For — Ihlonishwa kuphela lapho:
    • Umlingani oseduze esohlwini lwakho lwama-trusted-proxy amisiwe yi-admin
    • I-header ifundwa ukusuka kwesokudla kuya kwesokunxele, kweqiwa ama-hop athembekile/e-Cloudflare

Ukumiswa​

Ukuthembela kwe-Cloudflare Header​

Nika amandla ukuthembela kwe-header ye-Cloudflare ethi CF-Connecting-IP:

  • cap_trust_cloudflare_headers — Setha ku-ON ukuze ukhethe ukuthembela ku-CF-Connecting-IP
    • Okuzenzakalelayo: KUVALIWE (kukhutshaziwe)
    • I-plugin iza nesithombe se-Cloudflare CIDR esihlanganisiwe
    • Amabanga e-CIDR avuselelwa masonto onke nge-wp-cron
    • Ukubuyela emuva okuhlanganisiwe kusetshenziswa uma ukuvuselela kwehluleka

Ukumiswa kwe-Trusted Proxy​

Chaza ama-proxy akho aphambili nama-load-balancer:

  • cap_trusted_proxies — I-textarea yama-CIDR noma ama-IP angenalutho (eyodwa emugqeni ngamunye)
    • Amazwana avunyelwe (imigqa eqala ngo-#)
    • Ngaphandle kwalesi silungiselelo, X-Forwarded-For iyazitshwa ngisho noma isikhawuleli sezinga sinikwe amandla
    • Isibonelo: 
      # Our load balancer
      192.0.2.0/24

      # Backup proxy
      198.51.100.50

Ukuzitholela Ngokuzenzakalelayo Lapho Kuvulwa Okokuqala​

Lapho uvula isikhawuleli sezinga okokuqala, i-plugin ithola isimo sakho esingaba khona se-Cloudflare nama-proxy bese ibonisa isaziso se-admin senkinobho eyodwa ethi "Sebenzisa izilungiselelo ezitholiwe".

  • I-plugin ayikaze ibhale phezu kwamanani akho alondoloziwe
  • Uma ithrafikhi elandelayo iphakamisa ukuthi ukumiswa kwakho akusafani neqiniso (isb., i-Cloudflare ishintshe amabanga e-CIDR), isaziso sokungahambisani esingacimeki siveza isibuyekezo esinconyiwe

Kungani Lokhu Kubalulekile​

Imodeli eqinile yokuthembela kwe-IP ivala indlela ebalulekile yokukhohlisa: izicelo eziya ngqo ku-origin-server eziphethe i-header ye-CF-Connecting-IP ekhohlisiwe ngaphambilini bezizofakwa eqoqweni nge-IP ekhohlisiwe esikhundleni somlingani wangempela. Lokhu kubaluleke kakhulu ku:

  • Ukukhawulela izinga — Abahlaseli abakwazi ukweqa imikhawulo ngokukhohlisa ama-IP
  • Izibalo — Amamethrikhi akho okuhlaselwa abonisa ama-IP ezivakashi angempela, hhayi akhohlisiwe
  • Ukuqinisekiswa kwe-Captcha — Abahlinzeki bathola i-IP yesivakashi efanele yokuhlola ubungozi