首页 文章

在联系表格PHP文件上安装Google reCaptcha的信息

提问于
浏览
0

我正在尝试为联系页面安装Google reCaptcha,而我对php的知识非常有限 . 我不确定谷歌要求的信息应该放在我的php文件中 . 以下是Google对此的说明:

当您的用户提交集成reCAPTCHA的表单时,您将获得有效负载的一部分,其名称为“g-recaptcha-response” . 要检查Google是否已验证该用户,请发送包含以下参数的POST请求:网址:https://www.google.com/recaptcha/api/siteverify secret(required) - xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx response(required) - 值'G-验证码 - 响应' . remoteip - 最终用户的IP地址 .

这是我使用的表单的PHP .

<?php
$secret = 'SECRET KEY HERE';
$verificationResponse = $_POST["g-recaptcha-response"];

$response = file_get_contents("https://www.google.com/recaptcha/api/siteverify?secret=".$secret."&response=".$verificationResponse);
$response = json_decode($response, true);
if($response["success"] === true){
// actions if successful
}else{
// actions if failed
}

/* Set e-mail recipient */
$myemail = "info@thewiseinvestor.net";

/* Check all form inputs using check_input function */
$name = check_input($_POST['inputName'], "First and Last");
$email = check_input($_POST['inputEmail'], "Required");
$phone = check_input($_POST['inputPhone']);
$message = check_input($_POST['inputMessage'], "Brief Description");

/* If e-mail is not valid show error message */
if (!preg_match("/([\w\-]+\@[\w\-]+\.[\w\-]+)/", $email))
{
show_error("Invalid e-mail address");
}
/* Let's prepare the message for the e-mail */

$subject = "Contact Message from thewiseinvestor.net";

$message = "

Someone has sent you a message using your contact form:

Name: $name
Email: $email
Phone: $phone

Message:
$message

";

/* Send the message using mail() function */
mail($myemail, $subject, $message);

/* Redirect visitor to the thank you page */
header('Location:contact.html');
exit();

/* Functions we used */
function check_input($data, $problem='')
{
$data = trim($data);
$data = stripslashes($data);
$data = htmlspecialchars($data);
if ($problem && strlen($data) == 0)
{
show_error($problem);
}
return $data;
}

function show_error($myError)
{
?>
<html>
<body>

<p>Please correct the following error:</p>
<strong><?php echo $myError; ?></strong>
<p>Hit the back button and try again</p>

</body>
</html>
<?php
exit();
}
?>

HTML表单

<div class="row">
    <div class="col-md-6 message">
    <h2>Send Us A Message</h2>
    <form name="contactform" method="post" action="index.php" class="form-vertical">
      <div class="form-group">
        <label for="inputName" class="control-label">Name</label>
          <input type="text" class="form-control" id="inputName" name="inputName" placeholder="First and Last">
      </div>
      <div class="form-group">
        <label for="inputEmail" class="control-label">Email*</label>
          <input type="text" class="form-control" id="inputEmail" name="inputEmail" placeholder="Required">
      </div>
      <div class="form-group">
        <label for="inputPhone" class="control-label">Phone Number</label>
          <input type="text" class="form-control" id="inputPhone" name="inputPhone" placeholder="Optional">
      </div>
      <div class="form-group">
        <label for="inputMessage" class="control-label">Message</label>
          <textarea class="form-control" rows="5" id="inputMessage" name="inputMessage" placeholder="Brief Description"></textarea>
      </div>
      <div class="g-recaptcha" data-sitekey="DATA SITE KEY HERE"></div>
      <div class="form-group">
        <button type="submit" class="btn btn-custom pull-right hvr-underline-from-left">Send</button>
      </div>
    </form>
    </div> <!-- end col-md-6 -->

我真的不确定上述信息应该去哪里 . 非常感谢任何帮助 .

2 回答

  • 0

    谷歌reCaptcha机制在您的表单中注入一个隐藏的IFrame,并将一个散列字符串返回到您的处理脚本,称为“g-recaptcha-response” .

    因此,在上面的PHP脚本中,在 /* Set e-mail recipient */ 之前,请添加以下内容:

    <?php
    
    // error_reporting(E_WARNING);
    
    function readURL($url)
    {
        $ch = curl_init(); 
        curl_setopt($ch, CURLOPT_URL, $url); 
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); 
        $output = curl_exec($ch); 
        curl_close($ch); 
        return $output;
    }
    
    $secret = "PASTE-YOUR-SECRET-KEY-HERE";
    $verificationResponse = $_POST["g-recaptcha-response"];
    if( empty($verificationResponse) ) die("Google did not POST the required g-recaptha-response");
    
    $response = readURL("https://www.google.com/recaptcha/api/siteverify?secret=" . $secret . "&response=" . $verificationResponse . "");
    
    $responseArray = json_decode($response, true);
    if( $responseArray["success"] !== true) die("Invalid reCaptcha <a href=\"javascript:history.go(-1);\">Try Again</a>");
    
    /* Set e-mail recipient */
    $myemail = "info@thewiseinvestor.net";
    
    /* Check all form inputs using check_input function */
    $name = check_input($_POST['inputName'], "First and Last");
    $email = check_input($_POST['inputEmail'], "Required");
    $phone = check_input($_POST['inputPhone']);
    $message = check_input($_POST['inputMessage'], "Brief Description");
    
    /* If e-mail is not valid show error message */
    if (!preg_match("/([\w\-]+\@[\w\-]+\.[\w\-]+)/", $email))
    {
    show_error("Invalid e-mail address");
    }
    /* Let's prepare the message for the e-mail */
    
    $subject = "Contact Message from thewiseinvestor.net";
    
    $message = "
    
    Someone has sent you a message using your contact form:
    
    Name: $name
    Email: $email
    Phone: $phone
    
    Message:
    $message
    
    ";
    
    /* Send the message using mail() function */
    mail($myemail, $subject, $message);
    
    /* Redirect visitor to the thank you page */
    header('Location:contact.html');
    exit();
    
    /* Functions we used */
    function check_input($data, $problem='')
    {
    $data = trim($data);
    $data = stripslashes($data);
    $data = htmlspecialchars($data);
    if ($problem && strlen($data) == 0)
    {
    show_error($problem);
    }
    return $data;
    }
    
    function show_error($myError)
    {
    ?>
    <html>
    <body>
    
    <p>Please correct the following error:</p>
    <strong><?php echo $myError; ?></strong>
    <p>Hit the back button and try again</p>
    
    </body>
    </html>
    <?php
    exit();
    }
    
    ?>
    

    应该没有任何问题 . 在检查其他内容或向您发送任何电子邮件之前,代码将检查reCaptcha是否已正确传递 .

    祝好运 .

  • 1

    有reCaptcha的官方文档,并准备使用PHP lib .

    在这里,您可以找到准备使用的代码和注释:https://github.com/google/recaptcha

    您的服务器端代码如下所示:

    <?php
    $recaptcha = new \ReCaptcha\ReCaptcha($secret);
    $resp = $recaptcha->verify($gRecaptchaResponse, $remoteIp);
    if ($resp->isSuccess()) {
        // verified!
    } else {
        $errors = $resp->getErrorCodes();
    }
    

相关问题