XF 2.2 hCaptcha configuration errors

[FoP]

Hello,

We are suddenly getting hCaptcha configuration errors: sitekey-secret-mismatch.

Since Andy's "Block IP" add-on is mentioned in the string and it only happens on some failed attempts to register (using a VPN or proxy etc.) I thought maybe it was causing the errors but Andy has assured me this is not the case.

I have no idea what is causing this and how to fix it, so I could use some help. We are on XF cloud hosting.

Here's the string:

-----

Server error log

• ErrorException: hCaptcha configuration error: sitekey-secret-mismatch
• src/XF/Error.php:77
• Generated by: Unknown account
• 15 Jun 2024 at 09:42

Stack trace​

#0 src/XF.php(219): XF\Error->logError('hCaptcha config...', false)
#1 src/XF/Captcha/HCaptcha.php(122): XF::logError('hCaptcha config...')
#2 src/XF/Mvc/Controller.php(967): XF\Captcha\HCaptcha->isValid()
#3 src/XF/Pub/Controller/Register.php(415): XF\Mvc\Controller->captchaIsValid()
#4 src/XF/Mvc/Dispatcher.php(352): XF\Pub\Controller\Register->actionRegister(Object(XF\Mvc\ParameterBag))
#5 src/XF/Mvc/Dispatcher.php(258): XF\Mvc\Dispatcher->dispatchClass('XF:Register', 'Register', Object(XF\Mvc\RouteMatch), Object(Andy\BlockIP\XF\Pub\Controller\Register), NULL)
#6 src/XF/Mvc/Dispatcher.php(115): XF\Mvc\Dispatcher->dispatchFromMatch(Object(XF\Mvc\RouteMatch), Object(Andy\BlockIP\XF\Pub\Controller\Register), NULL)
#7 src/XF/Mvc/Dispatcher.php(57): XF\Mvc\Dispatcher->dispatchLoop(Object(XF\Mvc\RouteMatch))
#8 src/XF/App.php(2487): XF\Mvc\Dispatcher->run()
#9 src/XF.php(524): XF\App->run()
#10 index.php(20): XF::runApp('XF\\Pub\\App')
#11 {main}

Request state​

array(4) {
["url"] => string(18) "/register/register"
["referrer"] => string(48) "https://focus-on-photography-forum.net/register/"
["_GET"] => array(1) {
["/register/register"] => string(0) ""
}
["_POST"] => array(15) {
["_xfToken"] => string(8) "********"
["username"] => string(0) ""
["73cb63df6e98d90e13b70061c6814682ae688187"] => string(10) ""
["13a3eac0215724a6ff83d0c172381c1c06ad60bc"] => string(35) ""
["password"] => string(8) "********"
["1a75fa4b661cd38fed27333c844b674a47d348c4"] => string(8) "********"
["dob_month"] => string(1) "8"
["dob_day"] => string(2) "18"
["dob_year"] => string(4) "1980"
["location"] => string(7) "Le Fuet"
["custom_fields"] => array(5) {
["name"] => string(0) ""
["imgedit"] => string(2) "no"
["maincamera"] => string(0) ""
["lens1"] => string(0) ""
["lens2"] => string(0) ""
}
["accept"] => string(1) "1"
["reg_key"] => string(16) "aMkE_lcek6CbCWLR"
["5308e492b8753f862db7ec967d9336f56779eaeb"] => string(0) ""
["h-captcha-response"] => string(2352) "P1_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.hadwYXNza2V5xQZyhT78QjAlKsXfY1P4582n9x5I__xXNuwgnP-9dVJ832I9rcXeRpUhMkm3PxLT9MzJ3jgl-ANusdNsIeUbnJZa1J1smokbB1f-oCP8G9Ifbtx3fyTdwJx3C61oXxGsYXqcq2aPhZRBuyCeZ2HsG0EJPnMefLS1Ldj5rNCmttkw4CgrSmxb6isLSiRJMMkGZwxk0BMxSR0DUgkdHohTZyXL7NopdChLsWrmdZDhQ_7PGgmlwPRp0u9FrLNRQDhNwuIc0ti1apiYGtiNnqS6KikxxWF44WxLD8C7dbcL1t3xkgnyjk1wQBgNFHYXzV-vLxMV6yleLveaqt5N9PuBqlNPm7PrJOEun9zndR2cuhDaL_xuQ5j-7UXlkuz6dDvvbAyFlJcMdmG0VfEVmDC16kX7pMBDxSu8QiTdES1HzK3HkMrULKXmOtO_wSARNMDGJj-H8ANgqiOMjiWJVVO9ykhijTAdTyTrF_hqDEG1m0gDHfYLMTTrjc3VyYf8nLz6ml9mUSiHnV4HfS3emoifMaHWiaQcLTsFMY8NZQwxpRYuCUyqzgJuC76sbpj54f1kXC82qw0obj2Hg73Aw_1U05ab-XjcXA8i9dfSKA13PkP-nkZ47HwqoRYhrANQMcu0FOWLM3NpFQ6Z1TN_t0HXApPT5P2fi_QjXd7EkyN_P9-NRv59d26DMhF_O-pGaNwniw9fecqtGGsl2GKvn_8dU79pSOYE7Vixv-yMp4r7AEqod6Y-6U90wZ4aYEbPqBMz2YZtsFsXAx87EvtnrfwdI4s0A-qNo0B6VmUgljxfrceCrvF6dQ8g8fwYzEuVS1UUu29PuUslG7coQLJbxWLMmifRpB6wrNrtXWvNmb7Zh-F2JiQGLTWGX-ndZtZiGowuxxjIdxux-liJTumkBD3Hgs9B2iJ099gkigNPzvlDPU0DR7V1raxKr_VIK3FhgrVH42_rXdxX_pW438AS8Jt5HphdBe3TobgpYKMMlD4jHjgskVX-QveZqs7Vbf8DV2o9rHOvbl-rr-OoOxXhnbQgNTgk49a9fbQYgGthuAzVfQeIWbQ75Rh6rG7xxD08ldIxbw7FCbxI9XtIfxWaZ1IqFnSxSXwRBEFkaQOUu6fwlqKW4G6M4V9ix--djCzeMzPumPFl4qwbULgwvtRDIEvjVG1SCoz0WiB4DaeGTs5Vc_4EzZsmCRBW4GyUrd9eb_2VQ3hbCk7P0-S1enq7NROsu56Mp7leLEmbSSlzZxhD_sWimJz5F-fvre3Jol1u2ZCnqyjvNswnB2B8bLHefKVzL636CYjlB_u8XGY3DXKynl7mZIpCiCKHH7UBsKwZTizmH-l-nQ__dJSh3BjFuPLAKq8-ntFQnilbKIdtyy4IywPCLMjFV2YFd0iZU3GMkimVqiu9IGaqf6K2S_LjwOWlbPARuagahRsqhicksOmx9s5Zu0rerVKA6V4O0MLlqGWWxAznAmfoKzBWWUsalbKPPqIHyVV0jION2tS8VJJYI-sHcZ43sDx_TDs8CWfr8_rbH1MsiKF_4yr6t_yF3vVGX5ZgTMOK03SSWEQ9xD-8WCO1GLAWT8E4EukxGJj8eJDAqtbiyD9YHf61Jri474CnCAH-r_ZqIoXw61I4DmWLy9oJCmwz4ECRvbwY0qmabHjsMwWxnKhALS_cHaCJXUL3tAWrCd2DkM2QDb_4oIHXLxRaMhsdzR6iut-ced9dgRQN48dlLQkL_WuMzkrC_v54Kdnet8N81osTl_LzLolkdsmu44U_pHr0G-xwA9xxvVzCHpkJb3MZciS649-ZCZHfcYyHM9Pa-HwccRMo1jrmhVQ7dteC9NtBTRWzfZWHrmRBS4A2KeSEvzuf63isxhG_u1W1xjyMXXVikgreYLp8COcsiO4x-mhU2XfPqc5oJr0Rf_w-DCbv781Yp-v3jrupq_3NynPzbfISFIdwAQphYKGf32JXJk3sSW9_L9q7ipz3-tta36sFlu5ACcM9peP3HLkKbbCoqTbuGISn0P2OgcE6VvSEo1UWzpTa5Gg_f16LEWrwKuc8C40VHl8CQHMbCcOJg30S3ZGTpBPSZXVBL-qRIgyOD9RTIlfv6Xu0cW2F7UxGYT6ZmextdQ3fDfYFb5wn8cdgEtE-Zji3dfIHsohNXbfYkzBJu6pzzzesoKh0lzuwgEHwUUJ3W-FV2yvNsV3Jv324o2V4cM5mbUZRqHNoYXJkX2lkzjGtTIGia3KoM2EyMjVlNTiicGQA.R0zJEvsNqZ6xnPPKPVu6EU0NhE_2n4G6coKARCIEaoo"
}
}

 

[Paul B]

It's an issue with hCaptcha.

Change to an alternative captcha.

 

[FoP]

Thanks, Paul.

I was thinking of switching to Cloudflare turnstile. But unsure if checking the box in the ACP is enough or if I have to actually set it up, following the link (and not understanding how to do all that as we are newbies and totally stupid)?