描述
BWG CF Turnstile integrates Cloudflare’s Turnstile service with Gravity Forms to provide an effective and user-friendly way to block spam and bot submissions. Turnstile is Cloudflare’s privacy-focused alternative to CAPTCHA that offers better user experience while still providing strong protection.
Features
- Automatic Integration: Adds Turnstile protection to all your Gravity Forms or just the ones you select
- Manual Mode: For custom placement of the Turnstile widget within your forms
- Server-Side Validation: Securely validates submissions with Cloudflare’s API
- Theme Compatibility: Works with all Gravity Forms themes, including Orbital
- Easy Setup: Simple configuration with minimal settings
Requirements
- WordPress 5.0 or higher
- Gravity Forms 2.4 or higher
- A Cloudflare account to obtain Turnstile site and secret keys
Privacy Considerations
Cloudflare Turnstile is designed with privacy in mind. Unlike traditional CAPTCHA services, Turnstile is designed to respect user privacy while still providing effective protection. For more information about Turnstile’s privacy practices, please refer to Cloudflare’s documentation.
External Services
This plugin integrates with Cloudflare Turnstile, an external service provided by Cloudflare. The plugin communicates with Cloudflare’s services for form protection functionality.
What is Cloudflare Turnstile?
Cloudflare Turnstile is a privacy-preserving alternative to CAPTCHAs that helps protect forms from bots and automated attacks. It challenges visitors in a way that doesn’t disrupt the user experience.
When does this plugin connect to Cloudflare?
-
JavaScript Widget Loading: When a page containing a protected Gravity Form is loaded, the plugin loads the Turnstile JavaScript widget from
https://challenges.cloudflare.com/turnstile/v0/api.js. This happens on every page load where a protected form is displayed. -
Token Verification: When a form is submitted, the plugin sends a verification request to
https://challenges.cloudflare.com/turnstile/v0/siteverifyto validate the Turnstile token.
What data is sent to Cloudflare?
-
During Widget Loading:
- Your site key (public identifier)
- Standard browser information (user agent, IP address)
-
During Token Verification:
- The Turnstile response token
- Your secret key (for authentication)
- The user’s IP address (optional, for additional validation)
Legal and Privacy Information
By using this plugin, you agree to Cloudflare’s terms and privacy policies:
– Cloudflare Terms of Service
– Cloudflare Privacy Policy
– Cloudflare Turnstile Documentation
It is your responsibility to ensure that your use of this plugin complies with all applicable laws and regulations, including data protection laws in your jurisdiction. We recommend reviewing Cloudflare’s privacy policy and terms of service, and updating your own privacy policy to inform users about the use of Cloudflare Turnstile on your website.
安装
- Upload the
bwg-cf-turnstilefolder to the/wp-content/plugins/directory - Activate the plugin through the ‘Plugins’ menu in WordPress
- Go to Settings BWG CF Turnstile to configure your settings
- Create a Turnstile site key and secret key from your Cloudflare Dashboard
- Enter your site key and secret key in the plugin settings
- Choose your preferred integration mode:
- Add to All Forms (Automatic)
- Add to Selected Forms Only
- Manual Mode
常见问题
-
Do I need a Cloudflare account to use this plugin?
-
Yes, you need a Cloudflare account to create Turnstile keys. The good news is that Turnstile is free to use for up to 1 million challenges per month.
-
Where do I get my Turnstile site key and secret key?
-
You can create Turnstile keys from your Cloudflare dashboard:
1. Log in to your Cloudflare account
2. Go to the Turnstile section
3. Click “Add Site” and follow the instructions
4. Copy the site key and secret key to use in the plugin settings -
Will this work with all Gravity Forms themes?
-
Yes, the plugin is designed to work with all Gravity Forms themes, including the default theme, Orbital theme, and custom themes.
-
Can I control where the Turnstile widget appears in my forms?
-
Yes, you have two options:
1. Use the automatic integration which adds the widget just before the submit button
2. Use the manual mode and add the widget HTML code wherever you want in your form -
Will this slow down my website?
-
No, the plugin is designed to load the Turnstile JavaScript only when needed and asynchronously, so it won’t block your page loading.
-
Is Turnstile accessible and compliant with accessibility standards?
-
Yes, Cloudflare has designed Turnstile to be accessible and compliant with accessibility standards, making it suitable for websites that need to meet accessibility requirements.
评价
此插件暂无评价。
贡献者及开发者
更新日志
1.0.1
- Fixed JavaScript loading issue where version parameter was creating malformed URLs
- Removed version parameter from Cloudflare Turnstile API script enqueue
- Moved initialization script to wp_add_inline_script for better WordPress compliance
- Changed “Enable Turnstile” to be unchecked by default for better setup flow
- Added Turnstile widget preview in admin settings when keys are configured
1.0.0
- Initial release