Google ReCaptcha Configuration #900

Open
opened 2026-02-04 22:46:25 +03:00 by OVERLORD · 11 comments
Owner

Originally created by @dfirence on GitHub (Nov 11, 2018).

Hello Team

Does anyone have a solid tutorial to implement Google ReCaptcha v2 for :

  1. Login Form
  2. Registration Form

I would like secure Bookstack a bit more

Originally created by @dfirence on GitHub (Nov 11, 2018). Hello Team Does anyone have a solid tutorial to implement Google ReCaptcha v2 for : 1. Login Form 2. Registration Form I would like secure Bookstack a bit more
OVERLORD added the 🔨 Feature Request🚪 Authentication labels 2026-02-04 22:46:25 +03:00
Author
Owner

@samtuke commented on GitHub (Sep 3, 2019):

This, or some other spam prevention system like it, is critical for installations which are publicly accessible. We are getting tens of spam sign ups per week, which take a lot of management time to check and remove. Thanks.

@samtuke commented on GitHub (Sep 3, 2019): This, or some other spam prevention system like it, is critical for installations which are publicly accessible. We are getting tens of spam sign ups per week, which take a lot of management time to check and remove. Thanks.
Author
Owner

@ssddanbrown commented on GitHub (Sep 9, 2019):

I still need to decide if this is something I'd support in core or if I'd prefer to just provide extensibility for, But if you're urgent for something I've pushed a crude example implementation at this commit:
c49454da28 (Patch)

Tested with reCaptcha v2.
Is taken from the current stable codebase so patch could be applied to a release BookStack instance, You just need to change the two keys (Shown surrounded by %%, Replace % signs also).

@ssddanbrown commented on GitHub (Sep 9, 2019): I still need to decide if this is something I'd support in core or if I'd prefer to just provide extensibility for, But if you're urgent for something I've pushed a crude example implementation at this commit: https://github.com/BookStackApp/BookStack/commit/c49454da2833eb31b426e6b6ecfd790fad58567b ([Patch](https://github.com/BookStackApp/BookStack/commit/c49454da2833eb31b426e6b6ecfd790fad58567b.patch)) Tested with reCaptcha v2. Is taken from the current stable codebase so patch could be applied to a release BookStack instance, You just need to change the two keys (Shown surrounded by `%%`, Replace `%` signs also).
Author
Owner

@samtuke commented on GitHub (Sep 10, 2019):

Thanks!

@samtuke commented on GitHub (Sep 10, 2019): Thanks!
Author
Owner

@tcatlas commented on GitHub (Sep 22, 2020):

I'd also like this functionality.

@tcatlas commented on GitHub (Sep 22, 2020): I'd also like this functionality.
Author
Owner

@10935336 commented on GitHub (Apr 20, 2021):

I also need this feature, and recently my instance has received a lot of spam registrations.
In addition, if reCAPTCHA is added, please replace www.google.com with www.recaptcha.net to improve accessibility in certain regions, such as China, which is officially provided by Google: https://developers.google.com/recaptcha/docs/faq#can-i-use-recaptcha-globally

@10935336 commented on GitHub (Apr 20, 2021): I also need this feature, and recently my instance has received a lot of spam registrations. In addition, if reCAPTCHA is added, please replace www.google.com with www.recaptcha.net to improve accessibility in certain regions, such as China, which is officially provided by Google: https://developers.google.com/recaptcha/docs/faq#can-i-use-recaptcha-globally
Author
Owner

@nderambure commented on GitHub (May 26, 2021):

I'm also interested in this functionnality, tons of spams every day, we have closed the sign up for now.

@nderambure commented on GitHub (May 26, 2021): I'm also interested in this functionnality, tons of spams every day, we have closed the sign up for now.
Author
Owner

@JaggedJax commented on GitHub (Jan 18, 2022):

This would be nice as an optional on/off for those who want it. Another place it would be optionally helpful is when allowing guest comments.

@JaggedJax commented on GitHub (Jan 18, 2022): This would be nice as an optional on/off for those who want it. Another place it would be optionally helpful is when allowing guest comments.
Author
Owner

@NonzeroExitCode commented on GitHub (Dec 1, 2022):

Late to the party, but for anyone else who gets here by Googling the issue, this Laravel package allowed for CloudFlare Turnstile to tie into the login page pretty easily. Just had to add CloudFlare to the Content Security Policy as well.

https://github.com/romanzipp/Laravel-Turnstile

@NonzeroExitCode commented on GitHub (Dec 1, 2022): Late to the party, but for anyone else who gets here by Googling the issue, this Laravel package allowed for CloudFlare Turnstile to tie into the login page pretty easily. Just had to add CloudFlare to the Content Security Policy as well. https://github.com/romanzipp/Laravel-Turnstile
Author
Owner

@hregis commented on GitHub (Mar 15, 2024):

I opened the registration and in 2 days I had dozens of fake accounts, can you add a captcha system or others, it's essential these days! thanks !

@hregis commented on GitHub (Mar 15, 2024): I opened the registration and in 2 days I had dozens of fake accounts, can you add a captcha system or others, it's essential these days! thanks !
Author
Owner

@hregis commented on GitHub (Mar 15, 2024):

the first request is in 2018 ! today... 2024 !

@hregis commented on GitHub (Mar 15, 2024): the first request is in 2018 ! today... 2024 !
Author
Owner

@hregis commented on GitHub (Mar 15, 2024):

working on features is good, but security is just as important!
I'm also a developer, on the Dolibarr project and if we don't look at security it's hell!
And another note, please add a mass deletion of users, because deleting fake accounts means opening each account to delete them, and it takes a long time! ;-)
I thank you for your work!
good job and have a good day...

@hregis commented on GitHub (Mar 15, 2024): working on features is good, but security is just as important! I'm also a developer, on the Dolibarr project and if we don't look at security it's hell! And another note, please add a mass deletion of users, because deleting fake accounts means opening each account to delete them, and it takes a long time! ;-) I thank you for your work! good job and have a good day...
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/BookStack#900