Adds an hCaptcha challenge to User forms (requires hcaptcha.com account)
Version 1.1.0b1:
- Change: A challenge that hCaptcha reports as not passed now refuses the form
- Change: When hcaptcha.com cannot be reached the form is allowed and an Activity Log entry is written, so nobody (admins included) can be locked out of login
- Change: The hCaptcha check is sent as a POST with the hcaptcha.com TLS certificate verified, and includes the Site Key
- Bug Fix: With hCaptcha not configured (no Site Key / Secret) the module still changed templated login and signup and logged a PHP warning
- Bug Fix: A form whose name was part of an enabled form's name ("contact" when "contactus" was enabled) also got the hCaptcha challenge
- Bug Fix: A custom form with hCaptcha enabled that was embedded in a page or template showed no hCaptcha challenge and could not be submitted
- Bug Fix: Typo in the hCaptcha error message ("Capture completion failed")
Version 1.0.0b1:
- Initial Release