ochCaptcha 2.1.0.rc.1 for Joomla 5.3+/6.0+
| Version | 2.1.0.rc.1 |
|---|---|
| Maturity | Release Candidate |
| Release Date | 2026-08-12 |
| Tags | |
Changelog
| Type | Change |
|---|---|
| Fix | Warning undefined array keys when emergency bypass masks a failed token match |
| Addition | Add advanced config option ochcaptchaFallbackFetch (default off) that fetches the challenge token via a timer aligned to the form's minimum-time window, as a safety net for real visitors whose interaction never fires a qualifying focus/mouseover/touchmove event (e.g. autofill). |
| Addition | Add a "ready" visual state (activated + token fetched) layered on top of the existing "activated" state: yellow is initializing, blue is time on form, green is token fetched and ready to submit |
| Change | Replace CssIdentifier validate with regex on formId fields |
| Change | Rename blocklist.json to blocklist.php and adds a two-line PHP die() header to prevent direct web access Renames blocklist.json to blocklist.php and adds a two-line PHP die() header (matching Joomla log file convention) |
| Change | Update helper files |
| Change | Make blocklist file read-modify-write atomic under an exclusive lock |
| Change | Throttle blocklist writes for the same offending IP |
| Change | Cap unbounded growth of session-stored captcha tokens. Capped to the 50 most recently issued tokens. |
| Change | Defense-in-depth tweaks and code style |
| Notes | This version will only install on Joomla 5.3+ and PHP 8.1+ |
Installation Notes
Joomla! 6 Joomla! 5 Joomla! 4 (EOL - Not supported) Joomla! 3 (EOL - Not supported) PHP 8.1+
See: Documentation