Authentication using Google reCAPTCHA in PHP
In the modern online world, website security and user privacy protection have become increasingly important topics. Among them, the technical method of human-machine verification has become one of the indispensable ways to prevent malicious attacks. Google reCAPTCHA is a tool that is widely used for human-machine verification. Its concept has been deeply rooted in the hearts of the people, and its presence can even be seen on many websites we use every day. In this article, we will explore how to use Google reCAPTCHA for verification in PHP.
How Google reCAPTCHA works
Google reCAPTCHA was originally a human anti-bot computer program developed by a research team at Carnegie Mellon University, and was later acquired and improved by Google.
It works by presenting the user with a complex question containing text, images or audio and asking the user to answer the question, thereby identifying that a human rather than a robot is visiting the website. In addition, Google reCAPTCHA can also classify visitors into three levels: low risk, medium risk, and high risk based on factors such as user behavior patterns and browser fingerprints, thereby improving the accuracy of verification and preventing malicious attacks.
Using Google reCAPTCHA for verification in PHP
Before using Google reCAPTCHA for verification, we need to first download it from the official website of Google reCAPTCHA (https://www.google.com/recaptcha/about ) Apply for a reCAPTCHA Site Key and Secret Key. Site Key is used to display verification information on the user side, and Secret Key is used to verify the user's submitted information in the background. This information is necessary to use reCAPTCHA, and we need to keep it properly.
Next, we will focus on how to use Google reCAPTCHA for verification in PHP. Let's take a simple registration form as an example, which requires the user to enter a username, password and verification code to register. The specific steps are as follows:
- Embed the JavaScript code of Google reCAPTCHA in HTML
<head>
<script src="https://www.google.com/recaptcha/api.js" async defer></script>
</head>
<body>
<form>
<!--其他表单元素-->
<div class="g-recaptcha" data-sitekey="在这里填入你的Site Key"></div>
<button type="submit" name="submit">注册</button>
</form>
</body>The above code introduces the JavaScript file of Google reCAPTCHA and adds a The class is "g-recaptcha" and the data-sitekey attribute value is the div element of the Site Key we applied for on the reCAPTCHA official website. We embed this element into the form, so that when the user clicks the "Register" button, the verification function of Google reCAPTCHA will be triggered to complete the judgment of whether the user is a human.
- Verify whether the verification code is correct
<?php
if(isset($_POST['submit'])){//当用户按下注册按钮
$username = $_POST['username'];
$password = $_POST['password'];
$captcha = $_POST['g-recaptcha-response'];
$url = "https://www.google.com/recaptcha/api/siteverify";//Google reCAPTCHA的工作URL
$data = array(
'secret' => '在这里填入你的Secret Key',
'response' => $captcha
);
$options = array(
'http' => array(
'header' => "Content-type: application/x-www-form-urlencoded
",
'method' => 'POST',
'content' => http_build_query($data)
)
);
$context = stream_context_create($options);
$result = file_get_contents($url, false, $context);//向Google服务器发送POST请求
$response = json_decode($result);//解码JSON响应
if($response->success){//如果验证码正确
//将用户信息插入数据库
}
else{
echo "验证码出错，请检查输入";
}
}
?>In the above code, in the registered PHP processing script, we first obtain the user name, password, and reCAPTCHA verification code entered by the user. (i.e. $_POST['username'], $_POST['password'], and $_POST['g-recaptcha-response']), then Construct a POST request to the URL of Google reCAPTCHA, where the request data contains the Secret Key we applied for and the verification code submitted by the user.
Next, we use the file_get_contents() function to send a POST request to the Google reCAPTCHA server and decode the response. The return value of the response is a JSON format object, in which the success field indicates whether the user's verification code is correct. If the verification code is correct, the user information will be inserted into the database; otherwise, an error message will be output.
Conclusion
Google reCAPTCHA can provide security for the website simply and quickly. When we implement Google reCAPTCHA in the code, we only need a few lines of code to add powerful security to our website. Verification mechanism!
The above is the detailed content of Authentication using Google reCAPTCHA in PHP. For more information, please follow other related articles on the PHP Chinese website!
Hot AI Tools
Undresser.AI Undress
AI-powered app for creating realistic nude photos
AI Clothes Remover
Online AI tool for removing clothes from photos.
Undress AI Tool
Undress images for free
Clothoff.io
AI clothes remover
Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!
Hot Article
Hot Tools
Notepad++7.3.1
Easy-to-use and free code editor
SublimeText3 Chinese version
Chinese version, very easy to use
Zend Studio 13.0.1
Powerful PHP integrated development environment
Dreamweaver CS6
Visual web development tools
SublimeText3 Mac version
God-level code editing software (SublimeText3)
Hot Topics
PHP 8.4 Installation and Upgrade guide for Ubuntu and Debian
Dec 24, 2024 pm 04:42 PM
PHP 8.4 brings several new features, security improvements, and performance improvements with healthy amounts of feature deprecations and removals. This guide explains how to install PHP 8.4 or upgrade to PHP 8.4 on Ubuntu, Debian, or their derivati
7 PHP Functions I Regret I Didn't Know Before
Nov 13, 2024 am 09:42 AM
If you are an experienced PHP developer, you might have the feeling that you’ve been there and done that already.You have developed a significant number of applications, debugged millions of lines of code, and tweaked a bunch of scripts to achieve op
How To Set Up Visual Studio Code (VS Code) for PHP Development
Dec 20, 2024 am 11:31 AM
Visual Studio Code, also known as VS Code, is a free source code editor — or integrated development environment (IDE) — available for all major operating systems. With a large collection of extensions for many programming languages, VS Code can be c
Explain JSON Web Tokens (JWT) and their use case in PHP APIs.
Apr 05, 2025 am 12:04 AM
JWT is an open standard based on JSON, used to securely transmit information between parties, mainly for identity authentication and information exchange. 1. JWT consists of three parts: Header, Payload and Signature. 2. The working principle of JWT includes three steps: generating JWT, verifying JWT and parsing Payload. 3. When using JWT for authentication in PHP, JWT can be generated and verified, and user role and permission information can be included in advanced usage. 4. Common errors include signature verification failure, token expiration, and payload oversized. Debugging skills include using debugging tools and logging. 5. Performance optimization and best practices include using appropriate signature algorithms, setting validity periods reasonably,
PHP Program to Count Vowels in a String
Feb 07, 2025 pm 12:12 PM
A string is a sequence of characters, including letters, numbers, and symbols. This tutorial will learn how to calculate the number of vowels in a given string in PHP using different methods. The vowels in English are a, e, i, o, u, and they can be uppercase or lowercase. What is a vowel? Vowels are alphabetic characters that represent a specific pronunciation. There are five vowels in English, including uppercase and lowercase: a, e, i, o, u Example 1 Input: String = "Tutorialspoint" Output: 6 explain The vowels in the string "Tutorialspoint" are u, o, i, a, o, i. There are 6 yuan in total
How do you parse and process HTML/XML in PHP?
Feb 07, 2025 am 11:57 AM
This tutorial demonstrates how to efficiently process XML documents using PHP. XML (eXtensible Markup Language) is a versatile text-based markup language designed for both human readability and machine parsing. It's commonly used for data storage an
Explain late static binding in PHP (static::).
Apr 03, 2025 am 12:04 AM
Static binding (static::) implements late static binding (LSB) in PHP, allowing calling classes to be referenced in static contexts rather than defining classes. 1) The parsing process is performed at runtime, 2) Look up the call class in the inheritance relationship, 3) It may bring performance overhead.
What are PHP magic methods (__construct, __destruct, __call, __get, __set, etc.) and provide use cases?
Apr 03, 2025 am 12:03 AM
What are the magic methods of PHP? PHP's magic methods include: 1.\_\_construct, used to initialize objects; 2.\_\_destruct, used to clean up resources; 3.\_\_call, handle non-existent method calls; 4.\_\_get, implement dynamic attribute access; 5.\_\_set, implement dynamic attribute settings. These methods are automatically called in certain situations, improving code flexibility and efficiency.
