Requirements

Joomla! 4.4 PHP 8.1 PHP 8.2

Joomla! 5.1 Joomla! 5.2 PHP 8.1PHP 8.2 PHP 8.3

  • Basic Joomla! knowledge available between the chair and the keyboard :)

Installation is easy!

  1. Download the plugin
  2. in the Back-end go to menu Extensions > Manage
  3. in the tab [Upload file package] click [browse]  and select your downloaded plugin
  4. click [Upload & Install], wait for the installation to finish

Configuration

  1. in the back-end go to menu Extensions > Plugins
  2. search / locate the 'ochCaptcha' captcha plugin
  3. open the plugin
  4. in the tab [Plugin] set status to [Enabled]
  5. ...
  6. click [Save & Close] and you are good to go

Activate Joomla! One Click update and change-log integration

When you install the extension, it will automatically integrate with the Joomla Updater for both updates and change-logs.

On first use, the Joomla updater will prompt you with a 'Download Key is missing!' message.

  1. On this site: Go to [Tools > My Account > My Download Keys], and copy your Download ID#.
  2. On your site: Go to System > Update Sites, locate the extension, and paste the Download ID into the 'Download Key' field. Click [Save and Close].

Important:
If you're using this Download ID on a new server, you’ll receive an email to approve the device. Click the link in the email to enable downloads from this server.
Without approval, updates won’t be authorized, and the Joomla updater will display a 401 Unauthorized error when trying to fetch updates.

That’s it! You're all set.

In the plugin tab you can configure the following settings:

  • Display ochCaptcha: Configure to show or hide the ochCaptcha.
  • Verbose Captcha [only visible when Display Captcha = Yes]: Display verbose information on Captcha. Use this to get form information needed to configure protection per form.

The Submit Protection tab allows you to configure a minimum dwell time requirement before a submitted form is accepted. This helps to prevent bot-generated spam submissions by ensuring that users spend a reasonable amount of time on the page before submitting the form.

Configuration: To configure submit protection settings, follow these steps:

  • Minimum Time: This setting applies to all forms where ochCaptcha is used. Specify the minimum amount of time (in seconds) that a visitor must spend on the page before the form submission is accepted.
  • Blocklist Age: Set the duration (in minutes) for which offenders (those who fail the honeytrap or missing token checks) are added to the blocklist. A value of 0 disables blocklist functionality. Default is 60 minutes.
  • Trigger onFirewallAdd: Enable this option to trigger the onFirewallAdd event for offenders, adding them to the Firewall Blacklist. Note: This feature is only compatible with firewalls that support this triggered event (e.g., ochSimpleFirewall).
  • Protected Forms: This section allows you to configure a minimum dwell time requirement for specific forms. This overrides the generic minimum time setting for the specified forms.
    • Form Identifier: Enter the unique identifier of the form you want to configure. Enable 'Verbose Captcha' (in the [Basic] tab, only visible when Display Captcha = yes) to show the Form Identifier and configured minimum time on the Form's ochCaptcha display.
    • Minimum Time: Specify the minimum amount of time (in seconds) that a visitor must spend on the page before the form submission is accepted for this particular form.

The Content Protection tab allows you to configure minimum word count requirements and link restrictions for individual form fields. This helps to prevent spam and ensures that submitted content meets your specific requirements.

Example: For a contact form, you can require a minimum of 10 words in the message field and prohibit links or URLs. This helps to minimize spam and ensure that messages are substantial and relevant.

Configuration: To configure content protection settings, follow these steps:

  • Form Identifier: Specify the unique identifier of the form you want to configure. Enable 'Verbose Captcha' to show the Form identifier and configured minimum time on the Form's ochCaptcha display.
  • Form Field: Identify the specific form field that contains the content you want to validate. Enable 'Verbose Captcha' (in the [Basic] tab, only visible when Display Captcha = yes) to show the Form Fields on the Form's ochCaptcha display.
  • Minimum Words: Set the minimum number of words required in the specified form field.
  • Allow Links: Enable or disable links and URLs in the specified form field.

Once configured, ochCaptcha will validate the message based on the specified settings. If the message does not meet the requirements, an error message will be displayed.

  • Enable Debug: Enable Debug to get additional logging.
  • Emergency Bypass: This setting basically bypasses the Captcha and always returns successful. It will still log what would have been done by the captcha. Use this for debugging and setting up the plugin.

Agency Bundle - 12 months
Agency Bundle - 12 months
Supercharge your Joomla! toolbox with the Agency Bundle! Get all extensions plus 2 Hours of expert support – Subscribe today!
More Information
ochCaptcha - 12 months
ochCaptcha - 12 months
Elevate your website's performance and empower security and privacy control – effortlessly integrate GDPR-compliant captchas into your forms, whether visible or invisible.
More Information

Tips & Tricks

  • After making changes to the Captcha configuration make sure to clean cache as it is possible (depending on where the captcha is used) that the display of the captcha is cached together with the content / form and your changes are not visible / taking effect
  • All (visible) text strings can be changed via a Joomla Language override
  • ochCaptcha works on all forms that use Joomla Core Captcha functionality, but in order to be able to configure Form specific settings, the Form must have an ID (unique) attribute on the <form> HTML element. When the form doesn't have an ID attribute, the Verbose Captcha will not display any additional information and the form can only be used with the generic settings (Minimum Time)
  • With Verbose Captcha enabled you will see the Form Id, the configured settings (generic or specific) and all the fields used on the form: you can use this information to configure a specific form and to check if the settings you configured are in effect.
  • Important: Always start with advanced setting 'Enable Debug' = Yes. A lot of valuable information is being logged to the plg_captcha_ochcaptcha-log.php logfile. When turning debug to off, only warnings and errors are being logged (e.g. when a bot is blocked)

Technical support and feature requests via our forum (You need a valid subscription to be able to post)