How does this Google Captcha work to send to the person's email address for the form?

251 views
Skip to first unread message

Jackie Apel

unread,
Feb 24, 2015, 3:11:45 PM2/24/15
to reca...@googlegroups.com
Hi _

   I got my Google captacha box with the "I'm not a robot" Automatic display settings so the checkbox is working and displaying fine.  But there are two issues - one is that you don't have to check the checkbox in order to Submit your message - which isn't good.  Seems like there is some missing code, that should prevent the user from submitting until they have checked that box.

    The second issue for me, though, is that before I installed this Google captcha we were using a comments.cgi script through my hosting company, but this wasn't secure without a captcha.  So I went online to look for a captacha option, and the ones that we found were here:
  
   http://www.captcha.net/    This one however, exposes  your email address in the  html form code, so we didn't want to use that.  Then I went here, and looked into use this one through SnapHost.com, at this address:
http://www.snaphost.com/captcha/UpgradeToProCaptcha.aspx
which uses a form action that requires a redirect to their site, then back again to my site, but again seems to ask for email, which might be more vulnerable, but I don't know:
    

<form action="http://www.SnapHost.com/captcha/send.aspx" method="post" id="myform">
<input type="hidden" id="skip_WhereToSend" name="skip_WhereToSend"
value="yo...@email.com" />

Then I somehow got redirected again to the Google captcha option at this link:

https://www.google.com/recaptcha/intro/index.html 

which is how I ended up here, but I am trying now to figure out how to get this Google captcha form script to work to submit to my email address - which seems to be missing from this script. As it is, they don't indicate anywhere how it forwards the message to your email address.  I am using the Automatic coding, as such, with this in the header:
 I have followed the instructions on this page:

https://developers.google.com/recaptcha/docs/display

and using the Automatic script - this goes into the header:

  <script src="https://www.google.com/recaptcha/api.js" async defer></script>

Then all it requires is this for your form action:

   <form action="?" method="POST">

and then this div tag goes inside of your form tag, above your Submit button:

 <div align="left" class="g-recaptcha" data-sitekey="yoursitekeyhere"></div>

     But the problem remains as to how this form forwards email.  Does it still need to work with some other script - I tried inserting my cgi bin script back into the form action= " " but that doesn't work.  What should go into the form action="?" where the ? is? 

    Do I need to get a developer or something to insert additional coding to make this work?  Thanks and sorry to ask such a dumb question, but I didn't realize that this was going to take out the cgi-bin script that has my email address encoded.

  Thanks for any help that anyone can provide! 

  _  Jackie

 

  

Travis Lawrie

unread,
Feb 24, 2015, 4:18:23 PM2/24/15
to reca...@googlegroups.com
"one is that you don't have to check the checkbox in order to Submit your message"

This is very incorrect thinking. You need to get more experience with client side javascript before you were realize that this suggestion is a very bad idea.

You're asking for turnkey solution. Google can't provide a turnkey solution because the recaptcha needs to be server platform/framework agnostic. It's your job as the web developer to work out the implementation details. It's really not that hard either. If you can't do it yourself, then you may have to find a 3rd party who offers a pre-made turnkey solution for your specific platform/framework



--
You received this message because you are subscribed to the Google Groups "reCAPTCHA" group.
To unsubscribe from this group and stop receiving emails from it, send an email to recaptcha+...@googlegroups.com.
To post to this group, send email to reca...@googlegroups.com.
Visit this group at http://groups.google.com/group/recaptcha.
For more options, visit https://groups.google.com/d/optout.

Jackie Apel

unread,
Feb 24, 2015, 4:59:29 PM2/24/15
to reca...@googlegroups.com
 What I did not understand is how it forwards to your email, when there is no place to code an email address?  Having the Google key is one thing, but I was setting the account up for a friend, but nowhere in the Google account does it show a place for an email address.  Only the website address - is that enough to then have the form know where to send the messages? 

 I was not asking for any other solution, but just to understand how this Captcha actually works.  I am not a developer, just a front-end designer.  I do know something about Java Script, enough to implement, but am not writing it.

 thanks.

Jackie Apel

unread,
Feb 24, 2015, 9:37:18 PM2/24/15
to reca...@googlegroups.com
Mereum,

  If you were going to be helpful, instead of just pointing out to me that I am "wrong" - and should have been able to figure this out, couldn't you have just explained it yourself, as to how the form works to forward to someone's email address?  Maybe it is a simple explanation - but I do not see it, and I posted this help question here hoping someone would be nice enough to provide some insight and/or real help! 

 Jackie


On Tuesday, February 24, 2015 at 4:18:23 PM UTC-5, Meruem wrote:
Reply all
Reply to author
Forward
Message has been deleted
0 new messages