kowal/magento-cloudflare-turnstile

There is no license information available for the latest version (1.0.4) of this package.

Protect your store from spam messages and spam user accounts with Cloudflare Turnstile

Maintainers

Package info

gitlab.com/SylwesterKowal/magento-2-cloudflare-turnstile

Issues

Type:magento2-module

pkg:composer/kowal/magento-cloudflare-turnstile

Statistics

Installs: 41

Dependents: 0

Suggesters: 0

Stars: 1

1.0.4 2023-04-26 21:35 UTC

This package is not auto-updated.

Last update: 2026-02-26 10:49:54 UTC


README

Presentation

Turnstile is Cloudflare's smart CAPTCHA alternative. The module allows Turnstile to protect your Magento or Adobe Commerce forms:

  • Contact
  • Login
  • Register
  • Reset password
  • Review

Cloudflare Turnstile

Requirements

  • Magento >= 2.4.4
  • PHP >= 7.4.0

Installation

composer require kowal/magento-cloudflare-turnstile

Configuration

Disable all Magento Captcha

Stores > Configuration > Customers > Customer Configuration > CAPTCHA

  • Enable CAPTCHA on Storefront: no

Stores > Configuration > Security > Google reCAPTCHA Storefront > Storefront

  • Enable for Customer Login: no
  • Enable for Forgot Password: no
  • Enable for Create New Customer Account: no
  • Enable for Contact Us: no
  • Enable for Product Review: no

Enable Cloudflare Turnstile

Stores > Configuration > Customers > Cloudflare Turnstile > Settings

  • Enable: enable Cloudflare Turnstile
  • Sitekey: the sitekey given for the site in your Cloudflare dashboard
  • Secret key: the secret key given for the site in your Cloudflare dashboard
  • Theme: the Turnstile theme (auto, light or dark)
  • Forms to validate: the forms where a Turnstile validation is required

Testing

Use the following sitekeys and secret keys for testing purposes:

Sitekey

SitekeyDescription
1x00000000000000000000AAAlways passes
2x00000000000000000000ABAlways blocks
3x00000000000000000000FFForces an interactive challenge

Secret key

Secret keyDescription
1x0000000000000000000000000000000AAAlways passes
2x0000000000000000000000000000000AAAlways fails
3x0000000000000000000000000000000AAYields a "token already spent" error