Integrations

Laravel integration

1. Add the repository

Add the CaptchaCore repository to your composer.json:

{
    "repositories": [
        {
            "type": "composer",
            "url": "https://captchacore.eu/packages"
        }
    ]
}

2. Install the package

composer require captchacore/laravel

3. Configure .env

CAPTCHACORE_URL=https://captchacore.eu
CAPTCHACORE_SITE_KEY=cc_pub_dein_key
CAPTCHACORE_SECRET_KEY=cc_sec_dein_secret
CAPTCHACORE_WIDGET_MODE=interactive  # interactive | visible | invisible
CAPTCHACORE_WIDGET_THEME=auto        # auto | light | dark
CAPTCHACORE_WIDGET_COLOR=#4ade80
CAPTCHACORE_WIDGET_LABEL=Ich bin kein Bot
CAPTCHACORE_WIDGET_BRAND=CaptchaCore

Blade component

<form method="post" data-captchacore="interactive">
    @csrf
    <!-- Formularfelder -->
    <x-captchacore::widget />
    <button type="submit">Absenden</button>
</form>

Middleware

// Route schützen
Route::post('/register', RegisterController::class)
    ->middleware('captchacore:register');

// Oder als Validation Rule
'captchacore_token' => ['required', new CaptchaCoreToken('contact')]

// Tests: fake() mockt alle Verifikationen
CaptchaCore::fake();

Symfony Bundle

For Symfony 6.4 LTS and 7.x. Four integration paths: FormType, validator constraint, controller attributes and security badge.

1. Install

composer require captchacore/captchacore-bundle

Symfony Flex registers the bundle and creates config/packages/captchacore.yaml automatically.

2. Configure .env

CAPTCHACORE_URL=https://api.captchacore.eu
CAPTCHACORE_SITE_KEY=cc_pub_xxxxxxxxxxxxxxxxxxxxxxxxxxxx
CAPTCHACORE_SECRET_KEY=cc_sec_xxxxxxxxxxxxxxxxxxxxxxxxxxxx

FormType (recommended)

use CaptchaCore\SymfonyBundle\Form\Type\CaptchaCoreType;

$builder
    ->add('email', EmailType::class)
    ->add('message', TextareaType::class)
    ->add('captcha', CaptchaCoreType::class, [
        'form_type' => 'contact',
    ]);

Controller attributes

use CaptchaCore\SymfonyBundle\Security\Attribute\RequiresCaptcha;

#[Route('/contact', methods: ['POST'])]
#[RequiresCaptcha(formType: 'contact')]
public function submit(Request $request): Response { /* ... */ }

Validator constraint (DTOs)

use CaptchaCore\SymfonyBundle\Validator\CaptchaCoreToken;

final class ContactDto {
    public function __construct(
        #[Assert\NotBlank]
        public string $email,

        #[CaptchaCoreToken(formType: 'contact')]
        public string $captchaToken,
    ) {}
}

Programmatic

use CaptchaCore\SymfonyBundle\Client\CaptchaCoreClient;

$result = $this->captcha->verify($token, 'login');

if ($result->blocked()) {
    throw new AccessDeniedHttpException();
}

// Properties: valid, riskScore, action, confidence, reasons, stepUp

Twig (standalone)

{{ captchacore_widget(mode: 'interactive') }}

Tests

CaptchaCoreClient::fake(VerificationResult::allow());
$this->client->request('POST', '/contact', [...]);
self::assertResponseIsSuccessful();

WordPress Plugin

1. Install the plugin — in WordPress, go to Plugins → Add New and search for “CaptchaCore” (entry in the WordPress directory). Updates then come from WordPress itself. Alternatively upload the ZIP from your account.
2. Activate it under Plugins
3. Open Settings > CaptchaCore
4. Enter the service URL, site key and secret key
5. Choose widget mode, theme and color
6. Enable the forms you want (login, registration, comments, etc.)

WoltLab Suite

The package is distributed through the official WoltLab plugin store. Installation and every future update run through it — there is no separate download in your account.

1. Buy the package in the plugin store and install it in the ACP under Packages → Install package
2. Enter your credentials under Options → Security → Anti-Spam → CaptchaCore: service URL, site key and secret key
3. Choose the appearance: mode, theme, accent colour and language — “auto” follows the language of your forum.
4. Select CaptchaCore as the captcha under Options → Security → Anti-Spam → Captcha — it then applies to registration, the contact form and every other system form

Build your own integration

Do you want to bring CaptchaCore into a system with no package yet, such as Shopware, Joomla or your own framework? It takes a few hours. This order has proven itself.

Templates to copy from

All supplied integrations follow the same pattern. For a Symfony-based system such as Shopware 6 the Symfony bundle is the closest template, for a classic CMS the WordPress plugin.

Check before release

• Form submitted without JavaScript — does your fail rule apply?
• Token used twice — the second check must fail, the nonce is single use.
• Token submitted after more than five minutes — the widget renews it by itself, verify that in a long-running test.
• Two protected forms on one page — both must work independently.
• Form loaded in via AJAX — does the widget appear?
• The secret key appears nowhere in the HTML or in JavaScript.
• A response with decision=step_up — the user must not end up in a dead end.