=== ThinkCaptcha – Login Captcha, Register Captcha & Checkout reCAPTCHA === Contributors: thinkplugin Tags: login captcha, register captcha, woocommerce captcha, google recaptcha, security Requires at least: 5.5 Tested up to: 6.8.1 Stable tag: 1.1.4 License: GPLv2 or later License URI: https://www.gnu.org/licenses/gpl-2.0.html Secure WordPress and WooCommerce forms with Google reCAPTCHA. Provides anti-spam, login security, and effective bot protection. == Description == **Enhance Your Website's Login Security with the Power of Google reCAPTCHA** Are you tired of spam registrations, brute-force login attacks, and junk form submissions? ThinkCaptcha is the definitive **Google reCAPTCHA** plugin for WordPress, designed to provide maximum **login security** with a simple and modern interface. [cite: 3, 4] ThinkCaptcha allows you to easily add a **login captcha**, **register captcha**, and password reset captcha to your most vulnerable forms using Google's user-friendly "I'm not a robot" checkbox (reCAPTCHA v2). [cite: 5] This is the ultimate **spam protection** and **bot protection** your site needs. [cite: 6] **Free Features for Essential Security:** * **WordPress Login Captcha**: Implement a secure **login captcha** on your `/wp-login.php` page to stop brute-force attacks and enhance **login security**. [cite: 8] * **WooCommerce Login Captcha**: Protect your customer accounts by adding a **WooCommerce captcha** to the login form. [cite: 9] * **WooCommerce Register Captcha**: Stop fake user sign-ups with a robust **register captcha** on your WooCommerce registration form. [cite: 10] * **Password Reset Captcha**: Secure both WordPress and WooCommerce password reset forms from bot abuse. [cite: 11] * **Optimized for Performance**: The Google reCAPTCHA script loads asynchronously and only on pages where it is needed. [cite: 12] **🚀 Upgrade to ThinkCaptcha Pro for Ultimate Form Security!** Spammers target every form on your site. ThinkCaptcha Pro extends this powerful **reCAPTCHA** protection to create a comprehensive security shield. [cite: 14] * **WooCommerce Checkout Captcha**: The best way to prevent fraudulent orders and spam. [cite: 15] Add a **checkout captcha** to your WooCommerce checkout page. [cite: 16] * **Contact Form 7 reCAPTCHA**: Our most requested feature! [cite: 16] Add a **Contact Form 7 reCAPTCHA** to every contact form and eliminate junk mail forever. [cite: 17] * **WPForms Captcha**: Secure all forms created with WPForms with a powerful **WPForms captcha**. [cite: 18] * **WordPress Register Captcha**: Block spambots from creating user accounts on your main WordPress registration form with a secure **register captcha**. [cite: 19] * [Secure your entire website today. Get ThinkCaptcha Pro Now!](https://thinkplugin.com/thinkcaptcha-pro/) [cite: 20] == Third-Party Service Disclosure == This plugin connects to the Google reCAPTCHA service to protect forms from bots and spam. [cite: 20] * **Service Used:** Google reCAPTCHA (a service provided by Google LLC). [cite: 21] * **What Data is Sent:** To verify if a user is human, this service collects and sends hardware and software information, such as device and application data, to Google. [cite: 22] The user's IP address is also collected. [cite: 23] * **When Data is Sent:** This data is sent whenever a form protected by this plugin is displayed and submitted. [cite: 23] * **Links to Policies:** The use of the Google reCAPTCHA service is subject to Google's [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms). [cite: 24] == Installation == 1. Upload the `thinkcaptcha` folder to the `/wp-content/plugins/` directory. [cite: 25] 2. Activate the plugin through the 'Plugins' menu in WordPress. [cite: 26] 3. Go to the "ThinkCaptcha" menu in your WordPress admin dashboard. [cite: 27] 4. Visit the [Google reCAPTCHA admin console](https://www.google.com/recaptcha/admin/create) to get your Site Key and Secret Key for reCAPTCHA v2 ("I'm not a robot" Checkbox). [cite: 28] 5. Copy and paste your keys into the plugin's settings page to begin protecting your forms with reCAPTCHA. [cite: 29] 6. Use the simple toggles to enable the **login captcha**, **register captcha**, or other forms. [cite: 30] 7. Save changes, and your **form security** is active! [cite: 31] == Frequently Asked Questions == = How do I add a login captcha for WordPress login security? = ThinkCaptcha makes it easy. [cite: 32] After installing and adding your Google reCAPTCHA keys, simply go to the ThinkCaptcha settings page and toggle on "WordPress - Login Form". [cite: 33] A secure **login captcha** will automatically be added to your login page, dramatically improving your site's **login security** against brute-force attacks. [cite: 34] = How can I add Google reCAPTCHA to my WooCommerce forms? = Our plugin offers deep integration with WooCommerce. [cite: 35] You can add a **WooCommerce captcha** to the login, registration, and password reset forms directly from our settings panel with a single click. [cite: 36] The Pro version also allows you to add a **checkout captcha**. [cite: 37] = Does this plugin work as a Contact Form 7 reCAPTCHA solution? = Yes! [cite: 38] The Pro version is the perfect **Contact Form 7 reCAPTCHA** plugin. [cite: 39] It automatically integrates with all your CF7 forms to block spam submissions effectively. [cite: 40] = What is the difference between a captcha and reCAPTCHA? = "Captcha" is the general term for a test to tell humans and bots apart. [cite: 42] "reCAPTCHA" is Google's specific, advanced version of a captcha, which uses sophisticated risk analysis to provide a better user experience. [cite: 43] ThinkCaptcha uses Google's secure and user-friendly reCAPTCHA v2. [cite: 44] = Does this plugin slow down my site? = No. The plugin is lightweight, and the Google reCAPTCHA script is loaded asynchronously using WordPress best practices, meaning it doesn't block your page from loading. [cite: 45] It only loads on pages where the captcha is active. [cite: 46] == Screenshots == 1. The modern and clean settings panel, showing the Pro upgrade hero section. [cite: 47] 2. The General Settings section for entering Site and Secret keys. [cite: 48] 3. The Integrations section, showing free features enabled and Pro features locked with an "Upgrade" button. [cite: 49] 4. Example of the reCAPTCHA box on the WordPress login form. [cite: 50] 5. Example of the reCAPTCHA box on a WooCommerce form. [cite: 51] == Changelog == = 1.1.4 = * TWEAK: Optimized plugin name, description, and tags for better SEO and discovery on WordPress.org. = 1.1.3 = * TWEAK: Added tags to plugin header file for better search discovery. [cite: 52] = 1.1.2 = * FIX: Implemented `wp_enqueue_script` for loading external JavaScript to adhere to WordPress.org standards. [cite: 53] * FIX: Added nonce checks to all form submissions for improved security against CSRF attacks. [cite: 54] * FIX: Implemented sanitization and unslashing for all `$_POST` and `$_SERVER` inputs. [cite: 55] * FIX: Added versioning to all enqueued scripts and styles to prevent caching issues. [cite: 56] * FIX: Corrected readme.txt to match plugin version, tag count, and description length requirements. [cite: 57] * FIX: Added `isset` check for `$_SERVER` variables to prevent potential notices. [cite: 58] = 1.1.1 = * FIX: Bundled Font Awesome library locally to comply with WordPress.org guidelines and remove external dependencies. [cite: 59] * TWEAK: Updated version number. [cite: 60] = 1.1.0 = * Initial public release. [cite: 61] == Upgrade Notice == = 1.1.4 = This update improves the plugin's title and tags to make it easier to find in the plugin directory. = 1.1.3 = This update adds plugin tags to improve search results in the plugin directory. [cite: 62] = 1.1.2 = This is a required security and standards update. [cite: 63] It includes nonce protection, input sanitization, and proper script enqueuing to comply with WordPress.org guidelines. Please update immediately. [cite: 63]