Captcha Integration¶
The Preads Platform includes a robust CAPTCHA security layer designed to protect your network from automated bot registrations, brute-force login attempts, and contact form spam. By integrating industry-standard challenge providers, you can ensure that only legitimate human users interact with your sensitive portals.
🛡️ Supported Providers¶
The platform supports two of the world's leading CAPTCHA solutions, allowing you to choose the one that best fits your regional and privacy requirements.
1. Google reCAPTCHA (v2 Checkbox)¶
The most widely recognized solution. It provides a familiar "I'm not a bot" checkbox for your users.
- Best For: General use and maximum user familiarity.
- Setup: Requires a Google reCAPTCHA Admin account.
2. hCaptcha¶
A privacy-focused alternative that is often preferred in regions where Google services may be restricted.
- Best For: Privacy compliance (GDPR/CCPA focus) and global accessibility.
- Setup: Requires an account at hCaptcha.com.
⚙️ Administrative Configuration¶
Manage your security settings from Admin Panel -> Settings -> Captcha.
Step-by-Step Integration¶
- Select Driver: Choose between ReCaptcha, hCaptcha, or None (to disable all challenges).
- Enter Site Key: This is the public key provided by your chosen provider.
- Enter Secret Key: This is the private key used for server-side verification. > [!IMPORTANT] > For your security, the Secret Key is automatically encrypted before being stored in the database. It will never be displayed in plain text or exposed to the frontend.
- Save Settings: Once saved, the platform will automatically clear the settings cache to apply the new configuration.
🏗️ Dynamic Placement¶
You can granularly control where CAPTCHA challenges are displayed to minimize friction for verified users while maintaining high security where it matters most.
| Target Portal | Purpose |
|---|---|
| Publisher Registration | Prevents automated bot farms from creating bulk accounts. |
| Publisher Login | Adds an essential layer of protection against brute-force attacks on specialized accounts. |
| Public Contact Form | Stops automated spam from flooding your support inbox. |
🔍 Troubleshooting¶
"Invalid Domain" Errors¶
Ensure that your network's primary domain (and any subdomains) are explicitly listed in the "Authorized Domains" section of your ReCaptcha or hCaptcha dashboard.
Challenges Not Displaying¶
- Verify that the Site Key is entered correctly in the Admin Panel.
- Ensure you have selected the correct Captcha Type (e.g., don't enter ReCaptcha keys while the driver is set to hCaptcha).
- Check that the specific placement (Login/Register) is toggled to ON.