What this solution does
The hCaptcha for Site module integrates the hCaptcha service into registration, login, and web forms within the 1C-Bitrix platform. The solution provides automatic widget installation, server-side verification, multi-site configuration, and diagnostic tools.
The component protects public 1C-Bitrix forms from automated submissions. After specifying the Site key and Secret key, administrators can enable protection for registration, login, and selected web forms without modifying templates.
hCaptcha is a service that protects websites and applications from bots, spam, and other forms of automated abuse. The system analyzes user behavior and request parameters, offering a verification challenge to confirm human action when necessary. The developers emphasize user data privacy and minimizing personal data collection by combining CAPTCHA challenges with machine learning technologies and suspicious activity detection.
Key features:
- Automatic integration with standard registration and login forms;
- Protection for all web forms or selective protection by ID;
- Support for normal, compact, and invisible modes;
- Configuration for light and dark themes, with automatic or specified language selection;
- Separate configuration profiles for each site.
The module provides server-side validation of the response before executing the protected operation. It verifies the hostname correctness and the challenge expiration time. Rate limiting is implemented using file-based storage or Redis. State is stored in a PHP session or in Redis. Secure rotation of the secret key and support for external keys are available. The solution includes connection diagnostics, metrics collection, and infrastructure verification. It allows controlled disabling of the standard CAPTCHA with the ability to restore the original state.
Access to the administration panel interface is available via the Services → hCaptcha for site section or through the path Settings → Product Settings → Module Settings → hCaptcha for site.
When needed, General iT can implement “hCaptcha for the site”, configure the module and verify it against the current website setup.