Support » Plugin: Contact Form 7 » ReCaptcha hostname verification

  • Hello,

    To use reCaptcha on a WordPress multisite with a lot of domains or unknown future domains, it’s best to turn off Google’s domain verification.
    Google says this is a security risk and it should be countered with hostname checking on server.
    Contact Form 7 currently doesn’t do this (nor does any other contact form plugin I’ve checked). More so, the code doesn’t allow for easy addition of this check without directly editing the plugin files.

    Can this check be added to the plugin? If not, can a filter hook for $is_human be added to plugin’s recaptcha.php? I’d be happy to provide patch or pull request for either.

  • The topic ‘ReCaptcha hostname verification’ is closed to new replies.