Installation of Yandex SmartCaptcha PRO

What this solution does

The module replaces the standard CAPTCHA of the 1C-Bitrix platform and the 1C-Bitrix24 Corporate Portal (Online Store + CRM) with Yandex SmartCaptcha. This protects site forms from automated submissions, spam, and bot actions.

After installation, the module automatically detects forms using the standard Bitrix CAPTCHA, hides the code image and manual input field, and replaces them with the Yandex SmartCaptcha widget. In most cases, modifying standard component templates is not required.

User verification is performed both on the browser side and on the server. The token received from Yandex SmartCaptcha is sent to the Yandex server for validation. Only after successful verification does the module allow the standard Bitrix mechanism to proceed with form processing.

The module replaces the standard Bitrix CAPTCHA with Yandex SmartCaptcha PRO. It supports visible and invisible operating modes. Server-side token verification is implemented. The system handles multiple CAPTCHA forms on a single page, including forms loaded via AJAX and dynamically added elements. Standard and nested CAPTCHA fields are supported. Separate settings are available for each site in a multisite configuration. Users can select the widget language and configure the position of the SmartCaptcha service element. Pages can be excluded by URL masks, and custom error messages can be set. Timeout settings are available for client script loading and server-side verification. The system behavior is defined for temporary unavailability of Yandex servers. If the widget fails to load, the system automatically reverts to the standard Bitrix CAPTCHA. Features include logging of verification results and errors, as well as built-in settings diagnostics.

Supported modes

Visible mode

The standard Yandex SmartCaptcha widget is displayed in the form. The user completes verification before submitting the form.

Invisible mode

The SmartCaptcha check is triggered automatically upon form submission. The visible CAPTCHA block is typically hidden, and user interaction occurs only when necessary. The module supports multi-site deployment, allowing independent configuration for each domain within a single 1C-Bitrix installation or Corporate Portal (1C-Bitrix24: Online Store + CRM). Settings include module activation, Client Key and Server Key, operation mode, widget language, element position, URL exclusions, error messages, timeouts, Yandex service unavailability handling policy, and logging. This enables the use of different keys and parameters for different domains in the same installation. The system ensures fault tolerance: if the client-side script fails to load or an error occurs during widget creation, the module falls back to the standard Bitrix CAPTCHA, keeping the form accessible to the user. Two policies are available for server-side check errors: allow continues form processing during temporary Yandex service unavailability to increase site availability, while deny marks the check as failed and blocks form processing to enforce a stricter security mode.

The module automatically processes forms containing standard 1C-Bitrix CAPTCHA fields: captcha_sid, captcha_code, captcha_word, or capcha_word. Fields in uppercase and nested names, such as order[captcha_sid], are also supported. No changes to standard 1C-Bitrix components are required; non-standard forms only need to include compatible standard CAPTCHA fields.

Diagnostics for each site are available in the administrative panel. The tool verifies the module activation status, whether Client Key and Server Key are filled, the selected operating mode, the server check address, and the service unavailability handling policy. When logging is enabled, check results and technical errors are recorded in the standard 1C-Bitrix event log. Token values and secret keys are not recorded in plain text.

General iT can install and configure this module and check how it works on your website.