• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Not planned Add reCaptcha keys to configuration

Kent

Active member
#1
To change the keys, you must edit library/XenForo/Captcha/ReCaptcha.php directly. It'd be nice if this could be changed in the admin settings instead, so it won't get overwritten with updates or marked as an invalid file.

Doing so prevents a known attack with reCaptcha caused by using global keys where an attacker can host the captcha on their site and use the entered captcha for evil things instead of confirming it. This isn't much of a serious threat compared to paid workers entering captchas.