yiirocks/recaptcha

Google reCAPTCHA v2 and v3 field + server-side validator for Yii3.

v1.0.5 2026-08-07 16:52 UTC

Requires

• php: >=8.3
• psr/http-client: ^1.0
• psr/http-factory: ^1.0
• psr/http-message: ^1.0 || ^2.0
• yiisoft/form-model: ^1.1
• yiisoft/html: ^3.13 || ^4.0
• yiisoft/request-provider: ^1.3
• yiisoft/translator: ^3.0
• yiisoft/validator: ^2.5
• yiisoft/widget: ^2.2

Requires (Dev)

• friendsofphp/php-cs-fixer: @stable
• infection/infection: ^0.34.0
• nyholm/psr7: @stable
• phpunit/phpunit: @stable
• psr/container: ^2.0
• vimeo/psalm: ^6.0
• yiisoft/translator-message-php: ^1.1

BSD-3-Clause

• Mr.42

• validator
• recaptcha
• extension
• spam
• captcha
• bot
• yii
• widget
• yii3

Published on Packagist.org on 2026-08-07 16:52 UTC

README

Google reCAPTCHA v2 and v3 form field + server-side validator for Yii3.

Stats for Nerds

Features

• reCAPTCHA v2 — checkbox/invisible widget field with theme, size, and type options
• reCAPTCHA v3 — score-based field that fetches its token on form submit (not page load), avoiding surprise challenge popups
• Server-side validation — PHP attribute rules (RecaptchaV2Rule / RecaptchaV3Rule) verified against Google's siteverify endpoint
• Score threshold + action matching — v3 rules can enforce a minimum score and an expected action name
• Zero-config ergonomics — once site keys are set, fields and rules work out of the box via a static registry, no explicit DI wiring needed in views
• i18n — validation and legal-notice messages are translated through Yii Translator

Requirements

• PHP 8.3+
• PSR-17 request + stream factories
• PSR-18 HTTP client

Installation

composer require yiirocks/recaptcha

A PSR-18 client and PSR-17 factories are required. If your application already has them configured (e.g. via Guzzle, Symfony HTTP Client, or any other implementation), no further setup is needed. If not, install any compatible library, for example:

composer require guzzlehttp/guzzle nyholm/psr7

Documentation

The complete reference guide is available at Yii.Rocks.