Alexandre Alves

<p>This plugin adds <a href="https://www.cloudflare.com/products/turnstile/" rel="nofollow ugc">Cloudflare Turnstile</a> — a free, privacy-friendly CAPTCHA alternative — to your WordPress site.</p>
<p>Its key difference from other Turnstile plugins is <strong>per-form control for Elementor Pro</strong>: instead of toggling Turnstile globally for every Elementor form, you add a <strong>“Cloudflare Turnstile” field</strong> to the specific forms you want to protect, exactly like Elementor’s built-in reCAPTCHA field. Forms without the field are left untouched. If you prefer the all-at-once approach, an optional setting protects <strong>every</strong> Elementor Pro form automatically.</p>
<h4>Features</h4>
<ul>
<li><strong>Per-form Turnstile field for Elementor Pro Forms</strong> — drag it into the forms you choose.</li>
<li><strong>Optional “all Elementor Pro forms” switch</strong> — protect every Elementor Pro form at once, without adding the field to each one (off by default).</li>
<li>Optional protection for the built-in WordPress forms:
<ul>
<li>Login</li>
<li>Registration</li>
<li>Lost password</li>
<li>Comments</li>
</ul>
</li>
<li>One-click import of keys and settings from the “Simple Cloudflare Turnstile” plugin (no need to recreate your Cloudflare keys).</li>
<li>Global widget appearance settings (theme, size, visibility, language).</li>
<li>Strict server-side token verification (single-use tokens, 5-minute validity).</li>
<li>Secure-by-default behaviour: missing/invalid tokens are always blocked; the<br />
behaviour when Cloudflare itself is unreachable is configurable.</li>
<li>Write-only secret key (never displayed or sent to the browser).</li>
<li>Lightweight: in the default per-form mode, the Cloudflare script loads only on pages that actually show a widget. (The optional “all forms” mode loads it across the front end so late-loaded forms are covered.)</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>The Elementor field requires <strong>Elementor Pro</strong> (the Forms widget is a Pro feature). Without Elementor Pro, the WordPress form integrations still work.</li>
<li>A free Cloudflare Turnstile site key and secret key.</li>
</ul>
<h4>Third-party service</h4>
<p>This plugin renders the official Cloudflare Turnstile widget and verifies tokens with Cloudflare.</p>
<ul>
<li>When a protected form is displayed, the visitor’s browser loads <code>https://challenges.cloudflare.com/turnstile/v0/api.js</code> from Cloudflare.</li>
<li>
<p>When a protected form is submitted, your server sends a request to <code>https://challenges.cloudflare.com/turnstile/v0/siteverify</code> containing: the Turnstile token from the widget (<code>cf-turnstile-response</code>), your secret key, and — unless disabled with the <code>cwebts_remoteip</code> filter — the visitor’s IP address (<code>REMOTE_ADDR</code>). The secret key is never sent to the browser.</p>
</li>
<li>
<p>Cloudflare Turnstile: https://www.cloudflare.com/products/turnstile/</p>
</li>
<li>Terms of Service: https://www.cloudflare.com/website-terms/</li>
<li>Privacy Policy: https://www.cloudflare.com/privacypolicy/</li>
</ul>
<h4>About the name</h4>
<p>The distinctive part of the name is <strong>CWeb Form Protection</strong>, after <strong>Collectif WEB</strong>, the agency that maintains this plugin. The trailing “with Turnstile for Elementor Forms” only describes what the plugin integrates with: “Turnstile” is the Cloudflare service it uses, and “for Elementor Forms” signals compatibility with Elementor’s Forms widget. This plugin is not affiliated with, sponsored by, or endorsed by Cloudflare, Inc. or Elementor Ltd.</p>
<h4>Trademarks</h4>
<p>Not affiliated with Cloudflare, Inc. or Elementor Ltd. “Cloudflare” and “Turnstile” are trademarks of Cloudflare, Inc. “Elementor” is a trademark of Elementor Ltd. These names are used only to describe compatibility.</p>


CWeb Form Protection with Turnstile for Elementor Forms

Add Cloudflare Turnstile to your forms — with a per-form field for Elementor Pro so you choose exactly which forms are protected.

Ohm·Tang

<p>OhmTang CFT is a comprehensive WordPress security plugin that seamlessly integrates Cloudflare Turnstile’s advanced CAPTCHA protection into your website. Say goodbye to traditional annoying CAPTCHAs and embrace a frictionless, privacy-focused security solution that effectively blocks bots while providing a smooth user experience. Completely free Cloudflare Turnstile integration for WordPress and WooCommerce – no premium features, no hidden costs, just powerful spam protection.</p>
<p>📢 DISCLAIMER: Trademarks and brands are the property of their respective owners.</p>
<h4>🎛️ Granular Form Control</h4>
<p><strong>Individual Form Toggle and Each verification form supports custom error messages, allowing you to personalize the display when users fail the Turnstile challenge.- Complete Flexibility</strong></p>
<p>Take full control over your security implementation with our granular form management system:</p>
<ul>
<li><strong>Per-Form Enable/Disable</strong> – Every supported form can be individually activated or deactivated</li>
<li><strong>WordPress Core Forms</strong>:
<ul>
<li>✅ Login Form – Toggle on/off</li>
<li>✅ Registration Form – Toggle on/off  </li>
<li>✅ Lost Password Form – Toggle on/off</li>
<li>✅ Comment Form – Toggle on/off ( on/off login or no login user)</li>
</ul>
</li>
<li><strong>WooCommerce Forms</strong>:
<ul>
<li>✅ Login Form – Toggle on/off</li>
<li>✅ Registration Form – Toggle on/off</li>
<li>✅ Lost Password Form – Toggle on/off</li>
<li>✅ Checkout Form (Support Full site editting Block Checkout page and Traditional Checkout page) – Toggle on/off ( on/off login or no login user)</li>
</ul>
</li>
</ul>
<h4>🎯 Smart Conditional Protection</h4>
<p><strong>Intelligent Verification Based on User Status</strong></p>
<p>Advanced conditional protection for better user experience:</p>
<ul>
<li>
<p><strong>Checkout Page Smart Settings</strong>:</p>
<ul>
<li>🔄 <strong>Option to skip verification for logged-in users</strong> – Provide seamless checkout experience for returning customers</li>
<li>🔒 Always protect guest checkouts – Secure anonymous transactions</li>
<li>⚡ Reduce friction for trusted customers while maintaining security</li>
</ul>
</li>
<li>
<p><strong>Comment Form Intelligent Protection</strong>:</p>
<ul>
<li>🔄 <strong>Toggle verification for logged-in users</strong> – Choose whether authenticated users need CAPTCHA</li>
<li>🛡️ Always protect guest comments – Prevent spam from anonymous visitors</li>
<li>📝 Respect trusted commenters – Regular commentators can enjoy streamlined experience</li>
</ul>
</li>
<li>
<p><strong>Flexible User-Based Rules</strong>:</p>
<ul>
<li>🎪 Customize protection based on user roles and status</li>
<li>🔐 Balance security and usability intelligently</li>
<li>📊 Reduce unnecessary verification for trusted users</li>
</ul>
</li>
</ul>
<h4>🛡️ Complete WordPress Core Protection</h4>
<p>Protect every aspect of your WordPress site with comprehensive form security:</p>
<ul>
<li><strong>Login Security</strong> – Prevent brute force attacks on wp-login.php and admin areas (toggleable)</li>
<li><strong>User Registration</strong> – Stop spam registrations and fake account creation (toggleable)</li>
<li><strong>Comment Moderation</strong> – Eliminate spam comments automatically with smart user detection</li>
<li><strong>Password Recovery</strong> – Secure lost password forms against abuse (toggleable)</li>
<li><strong>Contact Forms</strong> – Compatible with popular contact form plugins</li>
<li><strong>Your favorite Contact Forms</strong> – If you need to integrate your preferred form, contact me: ohmtang@outlook.com</li>
</ul>
<h4>🛒 Advanced WooCommerce Integration</h4>
<p>Secure your online store and protect your revenue with dedicated WooCommerce protection:</p>
<ul>
<li><strong>Checkout Security</strong> – Prevent fraudulent orders and fake transactions with smart user detection</li>
<li><strong>Customer Registration</strong> – Ensure genuine customer accounts (toggleable)</li>
<li><strong>Guest Checkout</strong> – Protect checkout process for all users with conditional logic</li>
<li><strong>Login Forms</strong> – Secure customer login and authentication (toggleable)</li>
<li><strong>Review Systems</strong> – Block fake product reviews and ratings</li>
</ul>
<h4>⚙️ Advanced Features & Customization</h4>
<ul>
<li><strong>Smart Theme Options</strong> – Light, dark, and auto themes that adapt to your site design</li>
<li><strong>Flexible Styles</strong> – Normal, Flexible and Compact 3 styles where Turnstile appears on each form</li>
<li><strong>Granular Control</strong> – Enable/disable protection for individual forms with one click</li>
<li><strong>Conditional Logic</strong> – Smart rules based on user login status</li>
<li><strong>Performance Optimized</strong> – Minimal impact on page load times</li>
<li><strong>Mobile Responsive</strong> – Perfectly adapted for all devices</li>
<li><strong>Accessibility Ready</strong> – Designed with accessibility in mind</li>
</ul>
<h4>🔧 Developer Friendly</h4>
<ul>
<li>Extensive hooks and filters for customization</li>
<li>Clean, well-documented codebase</li>
<li>WordPress coding standards compliant</li>
<li>Easy integration with custom themes and plugins</li>
<li>Comprehensive error logging and debugging</li>
</ul>
<h4>🌍 Multi-language Ready</h4>
<ul>
<li>Full translation support with .pot file</li>
</ul>
<h4>Why Cloudflare Turnstile?</h4>
<ul>
<li><strong>User-Friendly</strong> – No annoying puzzles, image recognition, or text challenges</li>
<li><strong>Privacy-First</strong> – GDPR compliant and privacy-respecting</li>
<li><strong>Free Forever</strong> – Cloudflare’s free tier provides robust protection</li>
<li><strong>Advanced Detection</strong> – Machine learning and behavioral analysis</li>
<li><strong>Fast Implementation</strong> – Simple setup with Site Key and Secret Key</li>
</ul>
<p><strong>Experience the perfect balance of security and usability!</strong> With individual form controls and smart conditional protection, you can secure your site without frustrating your legitimate users.</p>


OhmTang CFT

Integrate Cloudflare Turnstile CAPTCHA for WordPress & WooCommerce forms with custom error messages, each form controlled individually

CWeb Form Protection with Turnstile for Elementor Forms vs OhmTang CFT