Google reCAPTCHA v3

[callenords]

By logging the $response from Google, I have discovered that the majority of time I receive “timeout-or-duplicate” error. I’ve learned that the token is only valid for 2 minutes after you execute is called as stated in the docs:

“Note: reCAPTCHA tokens expire after two minutes. If you're protecting an action with reCAPTCHA, make sure to call execute when the user takes the action.”

Thus, if you spend more then 2 minutes on the contact-form, you get the timeout error. That's why its recommended in the docs to only call execute if the user actually submits your form / takes action.

Source: https://stackoverflow.com/a/60076476/2157236

Any solution to this?

[vampirehunter]

On 10/31/2020 at 1:40 PM, ruden said:

Yes

https://apps.oscommerce.com/p9Yyp

hi

i installed this  hook system and the google capture was working for a while

now suddenly its giving me error in error log and makes my order screen go blank

 

this line here

$OSCOM_Hooks->register(basename($PHP_SELF, '.php'));

 

is making the error below it seems, as when i take it out, my admin order page comes back.

PHP Fatal error:  Cannot declare class hook_admin_orders_paypal, because the name is already in use in /home/website/public_html/includes/hooks/admin/orders/paypal.php on line 13

 

[vampirehunter]

is there way to have the hook system working  ?

when i add the  hook, it  stops the google recaptcha working

[gsmiley007]

Tried this on the new phoenix 1.0.8.0.

Got this error message after trying to use the contact us page.

 

Deprecated: The tep_session_unregister function has been deprecated. in includes/functions/sessions.php on line 113

Warning: Cannot modify header information - headers already sent by (output started at includes/functions/sessions.php:113) in includes/functions/general.php on line 36

 

[ruden]

Sorry i don't support phoenix

Addon works https://demo.osclab.com/vanilla-oscommerce/contact_us.php

Edited March 28, 2021 by ruden

[Hotclutch]

On 1/3/2020 at 11:36 PM, ruden said:

Google reCAPTCHA v3

For all version osCommerce stops bots from spamming account creation and contact us.

Install
---------

Unzip the archive and upload the files on server.
In the admin side menu Modules -> Boxes -> button Install Module -> select modules Google reCAPTCHA v3 -> button Install Module

Setting
----------

Go to reCAPTCHA v3 page https://www.google.com/recaptcha/intro/v3.html and register your store.
Add Site key and Secret key to module settings.

Thank you, Ruden. Only come across this thread now. It's a much needed addon for any osCommerce shop.

[matei68]

Hello.
recaptcha give 2 minutes time to complete the form.
After 2 minutes the form becomes invalid and redirects you to the index, without the account being made or the contact form being sent.
Did anyone manage to solve the problem? Thanks

[greasemonkey]

Anyone ever try this on checkout_confirmation?

[Hotclutch]

On 3/29/2021 at 12:09 PM, matei68 said:

Hello.
recaptcha give 2 minutes time to complete the form.
After 2 minutes the form becomes invalid and redirects you to the index, without the account being made or the contact form being sent.
Did anyone manage to solve the problem? Thanks

This 2 minute window is a problem, its too short. 3 mins ought to be sufficient, but if the account is not created there should be a message stack informing the user.

[phi148]

On 2/9/2022 at 1:55 AM, Hotclutch said:

This 2 minute window is a problem, its too short. 3 mins ought to be sufficient, but if the account is not created there should be a message stack informing the user.

The 2 minute window is the only reason I haven't implemented this.

I think there is a way to do it only when the user clicks "submit" for example, but I haven't looked into how that would change this add on.  Is anyone using this currently? How are you getting around the 2 minute issue?

I think a lot of people take longer than 2 minutes for the contact us or for the create account forms.

[Hotclutch]

https://developers.google.com/recaptcha/docs/v3

https://stackoverflow.com/questions/54437745/recaptcha-v3-how-to-deal-with-expired-token-after-idle

I have supertracker installed, so observe customers sometime struggle with this. The token expires and when they click submit it just redirects to index, confusing the user. The contact form does not seem to be a problem, at least for my site. I put an informational alert on the registration page informing users of this 2 minute interval they have to complete the form.

[phi148]

@Hotclutch nice information there.  I think it would be good to modify this addon to tie the captcha to the form submission (rather than on pageload).  That will get rid of the 2 minute problem entirely.

It probably isn't a good thing to display that informational alert... most customers probably have no idea what a captcha even is

[Hotclutch]

4 hours ago, phi148 said:

@Hotclutch nice information there.  I think it would be good to modify this addon to tie the captcha to the form submission (rather than on pageload).  That will get rid of the 2 minute problem entirely.

It probably isn't a good thing to display that informational alert... most customers probably have no idea what a captcha even is

I find the alert helps, otherwise the customer does not have a clue whats going on. The best option is for the code to be modified, but that's beyond me for the moment. I don't want to be making changes there at the risk of losing the effectiveness of the Captcha.

[nandima]

Hello @ruden, Where I can get this Add-On now?

Please help.

[Dj-Viper]

Hello, @ruben Same question as above, where can in find the add on know, have still a older version of oscommerce.

Greetings, Anne

 

[bonbec]

Hello @Dj-Viper  ,

You can find the old addons here : https://old.oscommerce.com/

[leopard333]

On 10/20/2022 at 12:50 PM, bonbec said:

Hello @Dj-Viper  ,

You can find the old addons here : https://old.oscommerce.com/

But there cant login always goto new oscommerce, so ALL downloads from OLD not working

[Jack_mcs]

@leopard333I just tried dowloading from there and it worked for me. But instead of recaptcha I recommend Honey Pot since it is does more than recaptcha.

[leopard333]

12 hours ago, Jack_mcs said:

@leopard333I just tried dowloading from there and it worked for me. But instead of recaptcha I recommend Honey Pot since it is does more than recaptcha.

https://old.oscommerce.com/M93NH&google-recaptcha-v3

 

click on Download, than ask for sign redirect to:  https://www.oscommerce.com/forums/login/

I login and come on: https://www.oscommerce.com/forums/?&_fromLogin=1

And not on OLD site.

When i go manuele back to https://old.oscommerce.com/M93NH&google-recaptcha-v3

than ask again for login..... again on   https://www.oscommerce.com/forums/login/

Ist circle...

 

Honey Pot i not like.

[Jack_mcs]

9 hours ago, leopard333 said:

Honey Pot i not like.

Honey Pot is easier to install and does a better job at stopping hackers and spammers than Recaptcha so, if you don't mind saying, I would like to know what you don't like about it so that I can improve it, if necessary.