• I’ve updated to v5.1 and then followed the instruction to integrate with reCAPTCHA v3.

    However, I have one question, with reCAPTCHA v2 we could easily know it worked by manually clicking on “I am not robot”, but with reCAPTCHA v3 how could we verify whether it works or not? to make sure we did not miss any setup steps during implementation? and what is the correct way to see the reports from reCAPTCHA v3?

    • This topic was modified 5 years, 11 months ago by yuchit.
Viewing 15 replies - 1 through 15 (of 19 total)
  • You should see a Google reCAPTCHA icon hovering at the bottom right of the web browser when accessing a website that has reCAPTCHA v3 enabled through CF7.

    That just confirms it’s installed correctly. Whether v3 works or not at reducing spam is up for debate.

    Thread Starter yuchit

    (@yuchit)

    Thanks. I do see reCAPTCHA icon on the bottom right corner but I also looked through Google documentation and it says we need to implement Secret on both users and server sides to have it work. I wonder if it is automatically done within CF7?

    I looked at my google reCAPTCHA account where it says I can see reports from reCAPTCHA v3 but it shows nothing but with an exclamation mark followed by “Adding reCAPTCHA to your site”. I am not so sure but it looks like my reCAPTCHA v3 is not really implemented correctly.

    and do you know where we can see scores reported by reCAPTCHA v3?

    According to the v3 documentation, it doesn’t look like there’s a way to test it like there was for v2 with test keys.

    Once you’ve had reCAPTCHA v3 installed for a couple of days, you can log on to your reCAPTCHA page at Google and it will show you some graphs of Top Ten Actions, Number of Requests, and Score Distribution. Of the ~30 sites I’ve set it up on, only a few have had sufficient traffic to show any data yet. The rest have a message at the top that says, “Note: The scores for this site may not be accurate before running with sufficient live traffic. Please see our developer site for more information.”

    Thread Starter yuchit

    (@yuchit)

    @linux4me2

    That’s what I saw too on My Google reCAPTCHA :
    Note: The scores for this site may not be accurate before running with sufficient live traffic. Please see our developer site for more information.

    and I also see “Adding reCAPTCHA to your site”, which looks like I didn’t have reCAPTCHA v3 installed or set up correctly.

    I installed v3, and began to get spam right away. (I never got any with v2). I decided to downgrade the plugin and use v2 recaptcha again.

    Word to the wise – if you do that, export your contact forms first, or else the uninstall/reinstall will delete them. Just go to Export, and choose “contact forms”.

    reCAPTCHA v3 provides a score from 0 to 1. What does Contact Form 7 consider an acceptable score for the form? If someone fails, then there is no fallback, unlike with v2 there was a fallback (the image captcha). I do not like knowing what is going on with my forms and not knowing if people are getting denied or not without the opportunity to prove themselves human (even if annoying).

    I suggest CF7 has an option for v2 or v3 instead of forcing people to use v3.

    Thread Starter yuchit

    (@yuchit)

    The author seems not to reply any other complaint review except mine, where I asked the same question as here :

    https://www.ads-software.com/support/topic/was-recaptcha-v3-implemented-correctly/

    He did not answer my questions but just asked me to post my questions here.

    The latest version doesn’t seem to have implemented V3 correctly. Until the author updates to fix the plugin you can download a previous version here:

    https://en-gb.www.ads-software.com/plugins/contact-form-7/advanced/

    Just scroll to the bottom and use the dropdown menu to select the last version.

    If you ever need to do this with other plugins, go to the main download page for any plugin and on the right hand side there’s an option ‘Advanced View’ just above the ratings.

    @yuchit, I found a way to confirm if reCAPTCHA v3 in Contact Form 7 is actually working or not. I used the information found here:

    https://stackoverflow.com/questions/48224799/test-invisible-recaptcha

    in the second answer from the top. At the time I wrote this, it had a rating of 9. Anyway, the process involves creating a “Robot” device in Chrome (I used Chromium) and browse the site with Chrome simulating your new “Robot” device. When I did this, I attempted to submit a form and got the error message stating my message couldn’t be delivered.

    When I submitted the form using my browser normally, the form went through just fine. Of course, I applied the “patch” mentioned elsewhere on this forum. (The patch involves replacing “return $spam” with “return true” on line 112 of modules/recaptcha.php).

    This isn’t necessarily the best approach, but it worked for me.

    Peace…

    Thread Starter yuchit

    (@yuchit)

    @tomdkat

    Thanks! so from this testing method and result you did, it seems reCAPTCHA v3 implemented in Contact Form 7 actually works?

    @yuchit

    He did not answer my questions but just asked me to post my questions here.

    It looks like you added your comment as a Review, so Takayuki asked you add your question as a question rather than a review as this is preferred by Forum Moderation.

    Thread Starter yuchit

    (@yuchit)

    @buzztone

    yeah I know, and that’s why I posted my question here later, but obviously I was just one of a ton asking the same thing out there, for example this one:
    https://www.ads-software.com/support/topic/how-to-check-recaptcha-v3-is-working-correctly/

    I was surprised he chose mine to reply but not to the others. He could have answered my question in his reply though.

    @yuchit: keep in mind I haven’t done extensive testing, but so far the patch appears to be working fine, meaning we haven’t received any spam via Contact Form 7 forms and legitimate form submissions are being delivered, as expected.

    Peace…

    It’s definitely not working for my clients and as a result I’ve got a lot of unhappy clients who are now getting spam and are blaming me. Not a good situation. V2 was fine, it seems ridiculous for cf7 to force us to move to v3. For many of my clients it’s just not practicable to downgrade to an earlier version of cf7 and it will cost me a small fortune to move them to another form plugin. Takayuki please fix this asap before my clients start to leave!

    You can follow these instructions Adding Captcha To WordPress Contact Form.

    Thank me later.

Viewing 15 replies - 1 through 15 (of 19 total)
  • The topic ‘How to know if reCAPTCHA v3 works or not?’ is closed to new replies.