Md Taufiqur Rahman

realitsolution

<p><strong>RIS Cloudflare CAPTCHA</strong> adds the modern, privacy-first <a href="https://www.cloudflare.com/products/turnstile/" rel="nofollow ugc">Cloudflare Turnstile</a> CAPTCHA to your WordPress site. Stop bots, spam comments, and brute-force login attacks without annoying your visitors with image puzzles or Google reCAPTCHA.</p>
<p>Unlike legacy CAPTCHAs, Cloudflare Turnstile runs completely in the background, never asks visitors to click traffic lights or type distorted text, and protects visitor privacy.</p>
<h4>Why Choose RIS Cloudflare CAPTCHA?</h4>
<ul>
<li><strong>Privacy-friendly</strong> – No user tracking, no cookies, no personal data collection.</li>
<li><strong>User-friendly</strong> – Most visitors never see a challenge; it’s invisible by default.</li>
<li><strong>Lightweight</strong> – Tiny footprint, no external dependencies, no bloated JS bundles.</li>
<li><strong>Free</strong> – Powered by Cloudflare Turnstile, which is 100% free for unlimited use.</li>
<li><strong>Universal</strong> – Protects WordPress login, registration, comment, lost-password, and WPForms.</li>
<li><strong>Developer-friendly</strong> – Shortcode, PHP function, and a verification filter for custom forms.</li>
<li><strong>Multilingual</strong> – Supports 11 widget languages including English, Spanish, French, German, Bengali, Hindi, Arabic, Chinese, Japanese, and more.</li>
<li><strong>Customizable</strong> – Light, dark, or auto theme; visible, invisible, or interaction-only mode.</li>
</ul>
<h4>Features</h4>
<ul>
<li>Drop-in Turnstile widget on:
<ul>
<li>WordPress login form</li>
<li>WordPress registration form</li>
<li>WordPress lost password form</li>
<li>WordPress comment form</li>
<li>WPForms (all forms)</li>
</ul>
</li>
<li>Server-side token verification for every form (not just client-side).</li>
<li>Secure nonce checks on every form submission.</li>
<li><strong>Test Connection</strong> button to instantly verify your API keys.</li>
<li>Per-form enable/disable checkboxes.</li>
<li>Light, dark, or auto theme matching.</li>
<li>Visible, invisible (“execute”), or interaction-only appearance.</li>
<li>Custom widget language selection.</li>
<li>Tabbed admin settings page (Settings / Help / About).</li>
<li>Shortcode: <code>[ris_turnstile action="contact"]</code> for custom forms.</li>
<li>Developer filter: <code>ris_cf_captcha_verify_response</code> for custom verification.</li>
<li>Full uninstall cleanup (deletes all options on plugin removal).</li>
<li>Multisite compatible.</li>
<li>Translation ready (.pot, /languages folder).</li>
<li>Proper WordPress coding standards, sanitization, escaping, and capability checks.</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>Install and activate the plugin.</li>
<li>Get free Turnstile keys from your <a href="https://dash.cloudflare.com/?to=/:account/turnstile" rel="nofollow ugc">Cloudflare Dashboard</a>.</li>
<li>Paste your Site Key and Secret Key into the plugin settings.</li>
<li>Tick the forms you want to protect.</li>
<li>Save. Done.</li>
</ol>
<h4>Shortcode</h4>
<p>Use the widget on any page or custom form:</p>
<pre><code>[ris_turnstile action="contact"]
</code></pre>
<p>Or in PHP:</p>
<pre><code><?php echo do_shortcode( '[ris_turnstile]' ); ?>
</code></pre>
<h4>Custom Form Verification (Developers)</h4>
<p>Hook into the verification filter:</p>
<pre><code>add_filter( 'ris_cf_captcha_verify_response', function( $is_valid, $token, $ip ) {
 // Your custom checks here.
 return $is_valid;
}, 10, 3 );
</code></pre>
<h4>Privacy</h4>
<p>This plugin:<br />
* Does <strong>not</strong> set any cookies.<br />
* Does <strong>not</strong> track users.<br />
* Does <strong>not</strong> store any personal data.<br />
* Sends the visitor’s IP address to Cloudflare only for the verification request, as required by the Turnstile API.<br />
* Does <strong>not</strong> send any data to any third party other than Cloudflare.</p>
<p>GDPR, CCPA, and privacy-law friendly.</p>
<h4>Related Plugins</h4>
<ul>
<li>Real IT Solution – <a href="https://www.realitsolution.com/" rel="nofollow ugc">https://www.realitsolution.com/</a></li>
</ul>
<h3>Credits</h3>
<ul>
<li>Developed by <a href="https://www.realitsolution.com/" rel="nofollow ugc">Real IT Solution</a> – Md Taufiqur Rahman.</li>
<li>Powered by <a href="https://www.cloudflare.com/products/turnstile/" rel="nofollow ugc">Cloudflare Turnstile</a>.</li>
<li>Icons by <a href="https://developer.wordpress.org/resource/dashicons/" rel="nofollow ugc">WordPress Dashicons</a>.</li>
</ul>
<h3>Support</h3>
<ul>
<li>Documentation: <a href="https://wordpress.org/plugins/ris-cloudflare-captcha/" rel="ugc">https://wordpress.org/plugins/ris-cloudflare-captcha/</a></li>
<li>Support forum: <a href="https://wordpress.org/support/plugin/ris-cloudflare-captcha/" rel="ugc">https://wordpress.org/support/plugin/ris-cloudflare-captcha/</a></li>
<li>Author website: <a href="https://www.realitsolution.com/" rel="nofollow ugc">https://www.realitsolution.com/</a></li>
</ul>


RIS Cloudflare CAPTCHA – Cloudflare Turnstile

Privacy-friendly Cloudflare Turnstile CAPTCHA for WordPress login, registration, comments & WPForms. Stops bots and spam.

Ruhul

mra13 / Team Tips and Tricks HQ

<p>Bot Protection with Turnstile lets you drop-in Cloudflare’s privacy-focused, no-CAPTCHA challenge on the most common attack surfaces of a WordPress site:</p>
<ul>
<li><strong>Core WordPress forms</strong> – Login, registration, password reset, and comment forms.</li>
<li><strong>WooCommerce</strong> – Protect checkout, login, registration, and password reset forms.</li>
<li><strong>bbPress</strong> – Secure forum registration, login, and topic creation forms.</li>
<li><strong>Contact Form 7</strong> – Add Turnstile to your CF7 forms to block spam submissions.</li>
<li><strong>Accept Stripe Payments</strong> – Protect checkout and payment pop-up forms.</li>
<li><strong>Simple Download Monitor</strong> – Secure download buttons and squeeze forms.</li>
<li><strong>Simple Shopping Cart</strong> – Add Turnstile to your shopping cart plugin’s manual checkout forms.</li>
<li><strong>WP Express Checkout</strong> – Protect checkout 100% discount checkout forms with Turnstile.</li>
<li><strong>WP eMember</strong> – Secure registration, login and password reset forms with Turnstile.</li>
</ul>
<p>Just add your Turnstile <em>Site Key</em> and <em>Secret Key</em>, choose the forms you want to protect, and you’re done. No more subjecting your users to image puzzles or accessibility headaches.</p>
<p>Turnstile can generate multiple types of non-intrusive challenges to verify users are human, all without showing visitors a puzzle.</p>
<h3>Highlights</h3>
<ul>
<li>Zero-friction, user-friendly bot protection.</li>
<li>A free reCAPTCHA alternative for WordPress.</li>
<li>Works even when visitors are behind ad-blockers or privacy extensions.</li>
<li>Granular toggles to enable/disable on individual forms.</li>
<li>Debug logging feature.</li>
<li>Fully translatable and developer-friendly with action/filter hooks.</li>
<li>Road-map for upcoming integrations with other popular plugins.</li>
</ul>
<h3>Getting Started</h3>
<p>It’s quick and easy to get started with the Bot Protection plugin.</p>
<ul>
<li>Generate a Site Key and Secret Key in your Cloudflare account, then enter them in the plugin’s settings page.</li>
<li>Choose which forms you want to protect with Turnstile and click Save.</li>
<li>Turnstile challenges will automatically appear on the selected forms to to block bots and spam.</li>
</ul>
<p>For more detailed instructions, please see our <a href="https://www.tipsandtricks-hq.com/bot-protection-with-turnstile-plugin" rel="nofollow ugc">setup guide</a>.</p>
<h3>External Services</h3>
<p>This plugin integrates with the Cloudflare Turnstile CAPTCHA service to help protect WordPress forms from spam and automated abuse.</p>
<p>When a protected form (such as login, registration, or comment) is displayed, the plugin connects to Cloudflare Turnstile to generate a CAPTCHA challenge. When the form is submitted, Turnstile receives the user’s IP address and browser metadata to verify whether the submission is from a human or bot.</p>
<p>This service is provided by Cloudflare, Inc.:<br />
– Terms of Service: https://www.cloudflare.com/terms/<br />
– Privacy Policy: https://www.cloudflare.com/privacypolicy/</p>


Bot Protection with Turnstile

A lightweight plugin that protects core WordPress forms and selected third‑party plugins from spam and bot attacks using Cloudflare Turnstile CAPTCHA.

RIS Cloudflare CAPTCHA – Cloudflare Turnstile vs Bot Protection with Turnstile