ThinkCaptcha – Login Captcha, Register Captcha & Checkout reCAPTCHA

Enhance Your Website’s Login Security with the Power of Google reCAPTCHA

Are you tired of spam registrations, brute-force login attacks, and junk form submissions?
ThinkCaptcha is the definitive Google reCAPTCHA plugin for WordPress, designed to provide maximum login security with a simple and modern interface.
ThinkCaptcha allows you to easily add a login captcha, register captcha, and password reset captcha to your most vulnerable forms using Google’s user-friendly “I’m not a robot” checkbox (reCAPTCHA v2).
This is the ultimate spam protection and bot protection your site needs.
Free Features for Essential Security:

• WordPress Login Captcha: Implement a secure login captcha on your /wp-login.php page to stop brute-force attacks and enhance login security.
• WooCommerce Login Captcha: Protect your customer accounts by adding a WooCommerce captcha to the login form.
• WooCommerce Register Captcha: Stop fake user sign-ups with a robust register captcha on your WooCommerce registration form.
• Password Reset Captcha: Secure both WordPress and WooCommerce password reset forms from bot abuse.
• Optimized for Performance: The Google reCAPTCHA script loads asynchronously and only on pages where it is needed.

🚀 Upgrade to ThinkCaptcha Pro for Ultimate Form Security!

Spammers target every form on your site.
ThinkCaptcha Pro extends this powerful reCAPTCHA protection to create a comprehensive security shield.

• WooCommerce Checkout Captcha: The best way to prevent fraudulent orders and spam.
  Add a checkout captcha to your WooCommerce checkout page.
• Contact Form 7 reCAPTCHA: Our most requested feature!
  Add a Contact Form 7 reCAPTCHA to every contact form and eliminate junk mail forever.
• WPForms Captcha: Secure all forms created with WPForms with a powerful WPForms captcha.
• WordPress Register Captcha: Block spambots from creating user accounts on your main WordPress registration form with a secure register captcha.
• Secure your entire website today. Get ThinkCaptcha Pro Now!

Third-Party Service Disclosure

This plugin connects to the Google reCAPTCHA service to protect forms from bots and spam.
* Service Used: Google reCAPTCHA (a service provided by Google LLC).
* What Data is Sent: To verify if a user is human, this service collects and sends hardware and software information, such as device and application data, to Google.
The user’s IP address is also collected.
* When Data is Sent: This data is sent whenever a form protected by this plugin is displayed and submitted.
* Links to Policies: The use of the Google reCAPTCHA service is subject to Google’s Privacy Policy and Terms of Service.

1. Upload the thinkcaptcha folder to the /wp-content/plugins/ directory.
2. Activate the plugin through the ‘Plugins’ menu in WordPress.
3. Go to the “ThinkCaptcha” menu in your WordPress admin dashboard.
4. Visit the Google reCAPTCHA admin console to get your Site Key and Secret Key for reCAPTCHA v2 (“I’m not a robot” Checkbox).
5. Copy and paste your keys into the plugin’s settings page to begin protecting your forms with reCAPTCHA.
6. Use the simple toggles to enable the login captcha, register captcha, or other forms.
7. Save changes, and your form security is active!

1. 

   The modern and clean settings panel, showing the Pro upgrade hero section.

2. 

   The General Settings section for entering Site and Secret keys.

3. 

   The Integrations section, showing free features enabled and Pro features locked with an "Upgrade" button.

4. 

   Example of the reCAPTCHA box on the WordPress login form.

5. 

   Example of the reCAPTCHA box on a WooCommerce form.

1.1.6

• TWEAK: Tested up to WordPress 6.9.

1.1.5

• FIX: Resolved “Short Description” length warning in readme.txt.
• FIX: Resolved “Tested up to” tag validation error by correcting version format.
• FIX: Resolved translation loading notice by optimizing text domain calls.
• FIX: Added missing translator comments to settings file for better I18n compliance.
• TWEAK: Removed Google Fonts dependency to improve GDPR compliance; switched to native WordPress admin fonts.
• TWEAK: Enhanced IP detection for sites behind Cloudflare or Proxy.

1.1.4

• TWEAK: Optimized plugin name, description, and tags for better SEO and discovery on WordPress.org.

1.1.3

• TWEAK: Added tags to plugin header file for better search discovery.

1.1.2

• FIX: Implemented wp_enqueue_script for loading external JavaScript to adhere to WordPress.org standards.
• FIX: Added nonce checks to all form submissions for improved security against CSRF attacks.
• FIX: Implemented sanitization and unslashing for all $_POST and $_SERVER inputs.
• FIX: Added versioning to all enqueued scripts and styles to prevent caching issues.
• FIX: Corrected readme.txt to match plugin version, tag count, and description length requirements.
• FIX: Added isset check for $_SERVER variables to prevent potential notices.

1.1.1

• FIX: Bundled Font Awesome library locally to comply with WordPress.org guidelines and remove external dependencies.
• TWEAK: Updated version number.

1.1.0

• Initial public release.