diff --git a/README.md b/README.md index 4a765c6..676d725 100644 --- a/README.md +++ b/README.md @@ -66,7 +66,7 @@ This library comes in when you need to verify the user's response. On the PHP side you need the response from the reCAPTCHA service and secret key from your credentials. Instantiate the `ReCaptcha` class with your secret key, specify any additional validation rules, and then call `verify()` with the reCAPTCHA -response (usually in `$_POST['g-recaptcha-response']` or the response from +response (usually in `$_POST[\ReCaptcha\ReCaptcha::USER_TOKEN_PARAMETER]` or the response from `grecaptcha.execute()` in JS which is in `$gRecaptchaResponse` in the example) and user's IP address. For example: diff --git a/examples/recaptcha-v2-checkbox-explicit.php b/examples/recaptcha-v2-checkbox-explicit.php index fb429a2..a6d6153 100644 --- a/examples/recaptcha-v2-checkbox-explicit.php +++ b/examples/recaptcha-v2-checkbox-explicit.php @@ -37,6 +37,8 @@ // not install via Composer. require_once __DIR__ . '/../vendor/autoload.php'; +use ReCaptcha\ReCaptcha; + // Register API keys at https://www.google.com/recaptcha/admin $siteKey = ''; $secret = ''; @@ -77,7 +79,7 @@

Add your keys

If you do not have keys already then visit https://www.google.com/recaptcha/admin to generate them. Edit this file and set the respective keys in the config.php file or directly to $siteKey and $secret. Reload the page after this.

@@ -86,7 +88,7 @@ setExpectedHostname($_SERVER['SERVER_NAME']) - ->verify($_POST['g-recaptcha-response'], $_SERVER['REMOTE_ADDR']); + ->verify($_POST[ReCaptcha::USER_TOKEN_PARAMETER], $_SERVER['REMOTE_ADDR']); if ($resp->isSuccess()): // If the response is a success, that's it! diff --git a/examples/recaptcha-v2-checkbox.php b/examples/recaptcha-v2-checkbox.php index 9395d59..6227ea4 100644 --- a/examples/recaptcha-v2-checkbox.php +++ b/examples/recaptcha-v2-checkbox.php @@ -37,6 +37,8 @@ // not install via Composer. require_once __DIR__ . '/../vendor/autoload.php'; +use ReCaptcha\ReCaptcha; + // Register API keys at https://www.google.com/recaptcha/admin $siteKey = ''; $secret = ''; @@ -77,7 +79,7 @@

Add your keys

If you do not have keys already then visit https://www.google.com/recaptcha/admin to generate them. Edit this file and set the respective keys in the config.php file or directly to $siteKey and $secret. Reload the page after this.

@@ -86,7 +88,7 @@ setExpectedHostname($_SERVER['SERVER_NAME']) - ->verify($_POST['g-recaptcha-response'], $_SERVER['REMOTE_ADDR']); + ->verify($_POST[ReCaptcha::USER_TOKEN_PARAMETER], $_SERVER['REMOTE_ADDR']); if ($resp->isSuccess()): // If the response is a success, that's it! ?> diff --git a/examples/recaptcha-v2-invisible.php b/examples/recaptcha-v2-invisible.php index c3b9397..cf8b920 100644 --- a/examples/recaptcha-v2-invisible.php +++ b/examples/recaptcha-v2-invisible.php @@ -37,6 +37,8 @@ // not install via Composer. require_once __DIR__ . '/../vendor/autoload.php'; +use ReCaptcha\ReCaptcha; + // Register API keys at https://www.google.com/recaptcha/admin $siteKey = ''; $secret = ''; @@ -77,7 +79,7 @@

Add your keys

If you do not have keys already then visit https://www.google.com/recaptcha/admin to generate them. Edit this file and set the respective keys in $siteKey and $secret. Reload the page after this.

@@ -86,7 +88,7 @@ setExpectedHostname($_SERVER['SERVER_NAME']) - ->verify($_POST['g-recaptcha-response'], $_SERVER['REMOTE_ADDR']); + ->verify($_POST[ReCaptcha::USER_TOKEN_PARAMETER], $_SERVER['REMOTE_ADDR']); if ($resp->isSuccess()): // If the response is a success, that's it! ?> diff --git a/src/ReCaptcha/ReCaptcha.php b/src/ReCaptcha/ReCaptcha.php index 31ec44a..58a0887 100644 --- a/src/ReCaptcha/ReCaptcha.php +++ b/src/ReCaptcha/ReCaptcha.php @@ -51,6 +51,12 @@ class ReCaptcha */ const SITE_VERIFY_URL = 'https://www.google.com/recaptcha/api/siteverify'; + /** + * User response token parameter name + * @const string + */ + const USER_TOKEN_PARAMETER = 'g-recaptcha-response'; + /** * Invalid JSON received * @const string