kowal/magento-cloudflare-turnstile

There is no license information available for the latest version (1.0.4) of this package.

Protect your store from spam messages and spam user accounts with Cloudflare Turnstile

1.0.4 2023-04-26 21:35 UTC

This package is not auto-updated.

Last update: 2024-05-09 02:30:07 UTC


README

Presentation

Turnstile is Cloudflare's smart CAPTCHA alternative. The module allows Turnstile to protect your Magento or Adobe Commerce forms:

  • Contact
  • Login
  • Register
  • Reset password
  • Review

Cloudflare Turnstile

Requirements

  • Magento >= 2.4.4
  • PHP >= 7.4.0

Installation

composer require kowal/magento-cloudflare-turnstile

Configuration

Disable all Magento Captcha

Stores > Configuration > Customers > Customer Configuration > CAPTCHA

  • Enable CAPTCHA on Storefront: no

Stores > Configuration > Security > Google reCAPTCHA Storefront > Storefront

  • Enable for Customer Login: no
  • Enable for Forgot Password: no
  • Enable for Create New Customer Account: no
  • Enable for Contact Us: no
  • Enable for Product Review: no

Enable Cloudflare Turnstile

Stores > Configuration > Customers > Cloudflare Turnstile > Settings

  • Enable: enable Cloudflare Turnstile
  • Sitekey: the sitekey given for the site in your Cloudflare dashboard
  • Secret key: the secret key given for the site in your Cloudflare dashboard
  • Theme: the Turnstile theme (auto, light or dark)
  • Forms to validate: the forms where a Turnstile validation is required

Testing

Use the following sitekeys and secret keys for testing purposes:

Sitekey

SitekeyDescription
1x00000000000000000000AAAlways passes
2x00000000000000000000ABAlways blocks
3x00000000000000000000FFForces an interactive challenge

Secret key

Secret keyDescription
1x0000000000000000000000000000000AAAlways passes
2x0000000000000000000000000000000AAAlways fails
3x0000000000000000000000000000000AAYields a "token already spent" error