Influenzic supports two CAPTCHA providers to protect public-facing forms against bot registrations and credential-stuffing attacks: Cloudflare Turnstile and hCaptcha. Configuration is at Influenzic → Settings → Security → CAPTCHA.
Provider Setup
- Create a site/secret key pair in your chosen provider’s dashboard (Cloudflare or hCaptcha).
- Set
inzc_captcha_providertoturnstileorhcaptcha. - Enter the Site Key (
inzc_captcha_site_key) and Secret Key (inzc_captcha_secret_key). - Toggle each protected location on or off as required.
Protected Locations
| Location | Toggle Key |
|---|---|
| Brand registration | inzc_captcha_protect_register_brand |
| Influencer registration | inzc_captcha_protect_register_influencer |
| Login form | inzc_captcha_protect_login |
| Forgot password | inzc_captcha_protect_forgot_password |
Disabled State
When provider is set to none or no secret key is supplied, all CAPTCHA challenges pass silently. No users are rejected. This is safe for development and staging environments.
Turnstile renders a
<div class="cf-turnstile"> widget that Cloudflare’s script auto-replaces. hCaptcha renders <div class="h-captcha">. Both widgets adapt to the user’s device automatically.