https://developers.google.com/recaptcha/docs/verify
if(isset($_POST['submit'])){
$recaptchaResponse = $_POST['g-recaptcha-response'];
$secretKey = 'MYKEY';
$request = file_get_contents("https://www.google.com/recaptcha/api/siteverify?secret=".$secretKey."&response=".$recaptchaResponse);
if(!strstr($request,"false")){
echo '<div class="notification error clearfix"><p><strong>Attention!</strong> You didnt complete the captcha.</p></div>';
exit();
然后 php 文件的其余部分会邮寄表单，但即使您没有完成 recaptcha，它也只是发送。基本上，如果 JSON 返回 false，我希望它不会发送并显示错误
如果有帮助，这里也是页面中的表格，我可能在那里也做错了什么......
<form method="POST" action="post.php" name="contactform" id="contactform" class="container">
<fieldset>
<div class="form-field grid-half">
<label for="name">Name</label>
<span><input type="text" name="name" id="name" /></span>
</div>
<div class="form-field grid-half">
<label for="email">Email</label>
<span><input type="email" name="email" id="email" /></span>
</div>
<div class="form-field grid-full">
<label for="message">Message</label>
<span><textarea name="message" id="message"></textarea></span>
</div>
<div class="form-field grid-full">
<div class="g-recaptcha" data-sitekey="MYKEY"></div>
</div>
</fieldset>
<div class="form-click grid-full">
<span><input type="submit" name="submit" value="Submit" id="submit" /></span>
</div>
<div id="alert" class="grid-full"></div>
</form>
使用 curl 而不是 file_get_contents（您是否像我一样希望在服务器设置中禁用file_get_contents）
$post_data = "secret=__your_secret_key__&response=".
$_POST['g-recaptcha-response']."&remoteip=".$_SERVER['REMOTE_ADDR'] ;
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://www.google.com/recaptcha/api/siteverify");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_HTTPHEADER,
array('Content-Type: application/x-www-form-urlencoded; charset=utf-8',
'Content-Length: ' . strlen($post_data)));
curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data);
$googresp = curl_exec($ch);
$decgoogresp = json_decode($googresp);
curl_close($ch);
if ($decgoogresp->success == true)
{
// Success
}
我发现有时，根据 PHP 版本/配置，直接访问对象是行不通的，所以使用 json_decode() .
/* $response object returned from https://www.google.com/recaptcha/api/siteverify via which ever method you use */
$obj = json_decode($response);
if($obj->success == true)
{
//passes test
}
else
{
//error handling
}
将此代码段粘贴到 HTML 模板的结束标记之前：
<script src='https://www.google.com/recaptcha/api.js'></script>
将此代码段粘贴到您希望显示 reCAPTCHA 小部件的位置的末尾：
<div class="g-recaptcha" data-sitekey="YOUR_SITE_KEY"></div>
例：
<html>
<head>
<title>Google recapcha demo - Codeforgeek</title>
<script src='https://www.google.com/recaptcha/api.js'></script>
</head>
<body>
<h1>Google reCAPTHA Demo</h1>
<form id="comment_form" action="form.php" method="post">
<input type="email" placeholder="Type your email" size="40"><br><br>
<textarea name="comment" rows="8" cols="39"></textarea><br><br>
<input type="submit" name="submit" value="Post comment"><br><br>
<div class="g-recaptcha" data-sitekey="YOUR_SITE_KEY"></div>
</form>
</body>
</html>
形式.php
<?php
$email;$comment;$captcha;
if(isset($_POST['email'])){
$email=$_POST['email'];
}if(isset($_POST['comment'])){
$email=$_POST['comment'];
}if(isset($_POST['g-recaptcha-response'])){
$captcha=$_POST['g-recaptcha-response'];
}
if(!$captcha){
echo '<h2>Please check the the captcha form.</h2>';
exit;
}
$response=file_get_contents("https://www.google.com/recaptcha/api/siteverify?secret=YOUR_SECRET_KEY&response=".$captcha."&remoteip=".$_SERVER['REMOTE_ADDR']);
if($response.success==true)
{
echo '<h2>Thanks for posting comment.</h2>';
}
?>
索尔斯 ：
- https://www.google.com/recaptcha/admin
- http://codeforgeek.com/2014/12/google-recaptcha-tutorial/
首先，这里已经给出的答案是绝对足够的。话虽如此，我只是想包含这个函数，它将这些答案包装成一个稍微方便一点的方法，这样您就可以将它们放入函数库中，然后几乎忘记它，直到谷歌改变一些东西。享受！
//Put these two functions into your function library-------
function CaptchaVerify($apiSecret)
{
//Returns -1 if no captcha response was in post(user did not submit form)
//Returns 0 if the verification fails
//Returns 1 if the verification succeeds
$captcha = isset($_POST['g-recaptcha-response'])? "&response=".$_POST['g-recaptcha-response']:'';
if($captcha != '')
{
$verifyUrl = "https://www.google.com/recaptcha/api/siteverify";
$apiSecret = "?secret=".$apiSecret;
$remoteip = "&remoteip=".$_SERVER['REMOTE_ADDR'];
$response=file_get_contents($verifyUrl.$apiSecret.$captcha.$remoteip);
$obj = json_decode($response);
return (integer)$obj->success;
}
return -1;
}
function MyCaptchaVerify()
{
$apiSecret = "PUT YOUR CAPTCHA SECRET HERE";
return CaptchaVerify($apiSecret);
}
//-------------------------------------------------------
//Example usage in your form
switch(MyCaptchaVerify())
{
case -1:echo "The form has not been submitted yet(First Load).<br>";break;
case 0:echo "The captcha verification failed.<br>"; break;
case 1:echo "The captcha verification succeeded.<br>"; break;
}
我更喜欢 cURL 示例而不是file_get_contents，因为它为错误日志记录等提供了更多选项。不过，有些人发现cURL非常令人生畏。对于那些用户来说，Guzzle是一个非常好的选择。
如果你想使用 Curl PHP 来获取响应，你可以使用以下代码：
if(isset($_POST['submit'])){
$privatekey = "paste_your_privatekey";
$responseKey = $_POST["g-recaptcha-response"];
$userIP = $_SERVER["REMOTE_ADDR"];
/////Curl Start///////
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL,"https://www.google.com/recaptcha/api/siteverify");
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, "secret=$privatekey&response=$responseKey&remoteip=$userIP");
// Receive server response ...
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$server_output = curl_exec($ch);
$response = json_decode($server_output);
curl_close ($ch);
/////Curl Close///////
// Further processing ...
if ($response->success == "true") {
Success……..
}esle{
Failed…………….
}
}
if (response == true) {
mail();
} else {
echo "error";
}