Hello!
I have a question about reCAPTCHA setup. Do I need to add an “action” when submitting the form for the captcha to work properly?
ChatGPT mentioned that I’m missing server-side validation. The captcha is visible on the frontend, but it can still be bypassed on the backend.
At the moment, I’m using Google Invisible reCAPTCHA with a simple field on the frontend. Is that enough, or do I also need to implement something like an “action” on submit and validate the token on the server side?
Any guidance or examples on the correct setup would be appreciated.
p.s. just got some spam with captcha on
Hi sirdna
In v8 you only need the ReCaptcha field as explained in this tutorial:
How did you find that reCaptcha can be bypassed ? note that your recaptcha keys should match the version you use, v2 and v3 keys are not the same
