CODEWITHSUNDEEP
phpjsonformsrecaptcha
millsteedo
millsteedo

Reputation: 163

Struggling with recaptcha v2 and form submission

https://developers.google.com/recaptcha/docs/verify

if(isset($_POST['submit'])){
$recaptchaResponse = $_POST['g-recaptcha-response'];
$secretKey = 'MYKEY';
$request = file_get_contents("https://www.google.com/recaptcha/api/siteverify?secret=".$secretKey."&response=".$recaptchaResponse);

    if(!strstr($request,"false")){
echo '<div class="notification error clearfix"><p><strong>Attention!</strong> You didnt complete the captcha.</p></div>';
exit();

Then the rest of the php file mails the form, but its just sending anyway even if you dont complete the recaptcha. Basically if the JSON returns a false I was hoping the it wouldnt send and would display an error

Also here is the form from the page if it helps, Ive probably done something wrong there too...

<form method="POST" action="post.php" name="contactform" id="contactform" class="container">

            <fieldset>
                <div class="form-field grid-half">
                    <label for="name">Name</label>
                    <span><input type="text" name="name" id="name" /></span>
                </div>
                <div class="form-field grid-half">
                    <label for="email">Email</label>
                    <span><input type="email" name="email" id="email" /></span>
                </div>
                <div class="form-field grid-full">
                    <label for="message">Message</label>
                    <span><textarea name="message" id="message"></textarea></span>
                </div>                  
                <div class="form-field grid-full">
                        <div class="g-recaptcha" data-sitekey="MYKEY"></div>
                </div>
            </fieldset>
            <div class="form-click grid-full">
                <span><input type="submit" name="submit" value="Submit" id="submit" /></span>
            </div>

            <div id="alert" class="grid-full"></div>
        </form>

Upvotes: 16

Views: 37997

Answers (7)

Ariful Haque
Ariful Haque

Reputation: 1

If you want to use Curl PHP for getting response, you can use the following code:

  if(isset($_POST['submit'])){
     $privatekey = "paste_your_privatekey";
     $responseKey = $_POST["g-recaptcha-response"];
     $userIP = $_SERVER["REMOTE_ADDR"];

     /////Curl Start///////
     $ch = curl_init();

     curl_setopt($ch, CURLOPT_URL,"https://www.google.com/recaptcha/api/siteverify");
     curl_setopt($ch, CURLOPT_POST, 1);
     curl_setopt($ch, CURLOPT_POSTFIELDS, "secret=$privatekey&response=$responseKey&remoteip=$userIP");

     // Receive server response ...
     curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

     $server_output = curl_exec($ch);
     $response = json_decode($server_output);

     curl_close ($ch);
     /////Curl Close///////

     // Further processing ...
     if ($response->success == "true") {
        Success……..
     }esle{
        Failed…………….
     }
  }

Upvotes: 0

Alan Kael Ball
Alan Kael Ball

Reputation: 680

I found that sometimes, depending on the PHP version/config, accessing an object directly won't work, so use json_decode().

/* $response object returned from https://www.google.com/recaptcha/api/siteverify via which ever method you use */

$obj = json_decode($response);
if($obj->success == true)
{
    //passes test
}
else
{
    //error handling
}

Upvotes: 24

Surya
Surya

Reputation: 124

I prefer the cURL example to the file_get_contents as it gives more options for error logging and such. Some find cURL quite daunting though. For those users Guzzle is a very good alternative.

Upvotes: 1

Paul Ishak
Paul Ishak

Reputation: 1093

First off, the answers already given here are absolutely adequate. That being said, I just wanted to include this function that wraps those answers into a slightly more convenient method, that way you can throw them into your function library and pretty much forget about it until google changes something. Enjoy!

//Put these two functions into your function library-------
function CaptchaVerify($apiSecret)
{
    //Returns -1 if no captcha response was in post(user did not submit form)
    //Returns 0 if the verification fails
    //Returns 1 if the verification succeeds
    $captcha = isset($_POST['g-recaptcha-response'])? "&response=".$_POST['g-recaptcha-response']:'';
    if($captcha != '')
    {
        $verifyUrl = "https://www.google.com/recaptcha/api/siteverify";
        $apiSecret = "?secret=".$apiSecret;
        $remoteip = "&remoteip=".$_SERVER['REMOTE_ADDR'];
        $response=file_get_contents($verifyUrl.$apiSecret.$captcha.$remoteip);
        $obj = json_decode($response);
        return (integer)$obj->success;          
    }
    return -1;
}
function MyCaptchaVerify()
{
    $apiSecret = "PUT YOUR CAPTCHA SECRET HERE";
    return CaptchaVerify($apiSecret);
}
//-------------------------------------------------------
//Example usage in your form
switch(MyCaptchaVerify())
{
    case -1:echo "The form has not been submitted yet(First Load).<br>";break;
    case  0:echo "The captcha verification failed.<br>";    break;
    case  1:echo "The captcha verification succeeded.<br>"; break;
}

Upvotes: 5

Peter
Peter

Reputation: 1444

Using curl instead of file_get_contents (should you, like me, want file_get_contents to be disabled in the server settings)

$post_data = "secret=__your_secret_key__&response=".
   $_POST['g-recaptcha-response']."&remoteip=".$_SERVER['REMOTE_ADDR'] ;

$ch = curl_init();  
curl_setopt($ch, CURLOPT_URL, "https://www.google.com/recaptcha/api/siteverify");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_HTTPHEADER, 
   array('Content-Type: application/x-www-form-urlencoded; charset=utf-8', 
   'Content-Length: ' . strlen($post_data)));
curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data); 
$googresp = curl_exec($ch);       
$decgoogresp = json_decode($googresp);
curl_close($ch);

if ($decgoogresp->success == true)
    {
    // Success
    }

Upvotes: 25

Elshan
Elshan

Reputation: 7693

Paste this snippet before the closing tag on your HTML template:

<script src='https://www.google.com/recaptcha/api.js'></script>

Paste this snippet at the end of the where you want the reCAPTCHA widget to appear:

<div class="g-recaptcha" data-sitekey="YOUR_SITE_KEY"></div>

Example :

<html>
  <head>
    <title>Google recapcha demo - Codeforgeek</title>
    <script src='https://www.google.com/recaptcha/api.js'></script>
  </head>
  <body>
    <h1>Google reCAPTHA Demo</h1>
    <form id="comment_form" action="form.php" method="post">
      <input type="email" placeholder="Type your email" size="40"><br><br>
      <textarea name="comment" rows="8" cols="39"></textarea><br><br>
      <input type="submit" name="submit" value="Post comment"><br><br>
       <div class="g-recaptcha" data-sitekey="YOUR_SITE_KEY"></div>
    </form>
  </body>
</html>

form.php

<?php

        $email;$comment;$captcha;
        if(isset($_POST['email'])){
          $email=$_POST['email'];
        }if(isset($_POST['comment'])){
          $email=$_POST['comment'];
        }if(isset($_POST['g-recaptcha-response'])){
          $captcha=$_POST['g-recaptcha-response'];
        }
        if(!$captcha){
          echo '<h2>Please check the the captcha form.</h2>';
          exit;
        }
        $response=file_get_contents("https://www.google.com/recaptcha/api/siteverify?secret=YOUR_SECRET_KEY&response=".$captcha."&remoteip=".$_SERVER['REMOTE_ADDR']);
        if($response.success==true)            
        {
          echo '<h2>Thanks for posting comment.</h2>';
        }
?>

Sorce :

Upvotes: 7

random
random

Reputation: 1

if (response == true) {
    mail();
} else {
    echo "error";
}

Upvotes: -6

Related Questions