BookStackApp
Google ReCaptcha Configuration
Hello Team
Does anyone have a solid tutorial to implement Google ReCaptcha v2 for :
- Login Form
- Registration Form
I would like secure Bookstack a bit more
This, or some other spam prevention system like it, is critical for installations which are publicly accessible. We are getting tens of spam sign ups per week, which take a lot of management time to check and remove. Thanks.
I still need to decide if this is something I'd support in core or if I'd prefer to just provide extensibility for, But if you're urgent for something I've pushed a crude example implementation at this commit: https://github.com/BookStackApp/BookStack/commit/c49454da2833eb31b426e6b6ecfd790fad58567b (Patch)
Tested with reCaptcha v2.
Is taken from the current stable codebase so patch could be applied to a release BookStack instance, You just need to change the two keys (Shown surrounded by %%, Replace % signs also).
I also need this feature, and recently my instance has received a lot of spam registrations. In addition, if reCAPTCHA is added, please replace www.google.com with www.recaptcha.net to improve accessibility in certain regions, such as China, which is officially provided by Google: https://developers.google.com/recaptcha/docs/faq#can-i-use-recaptcha-globally
I'm also interested in this functionnality, tons of spams every day, we have closed the sign up for now.
This would be nice as an optional on/off for those who want it. Another place it would be optionally helpful is when allowing guest comments.
Late to the party, but for anyone else who gets here by Googling the issue, this Laravel package allowed for CloudFlare Turnstile to tie into the login page pretty easily. Just had to add CloudFlare to the Content Security Policy as well.
https://github.com/romanzipp/Laravel-Turnstile
I opened the registration and in 2 days I had dozens of fake accounts, can you add a captcha system or others, it's essential these days! thanks !
working on features is good, but security is just as important! I'm also a developer, on the Dolibarr project and if we don't look at security it's hell! And another note, please add a mass deletion of users, because deleting fake accounts means opening each account to delete them, and it takes a long time! ;-) I thank you for your work! good job and have a good day...