Community Documentation

CAPTCHA: protect forms against spam bots

Last updated October 30, 2012. Created by soxofaan on November 9, 2010.
Edited by dooug, shamio, hosef. Log in to edit this page.

General Information

A CAPTCHA is a challenge-response test most often placed within web forms to determine whether the user is human. The purpose of the CAPTCHA module is to block form submissions by spam-bots, which are automated scripts that post spam content everywhere they can. The CAPTCHA module includes several options which allow you to add a challenge to virtually every form on the website.

Notes

Varnish will cache your page with the challenge. Only the first user to view a given form will have been served a unique challenge by the web server, therefore only the first user will actually be able to complete the form.

This will only stop spam-bots. It will not stop humans with ulterior motives.

Prerequisites

Drupal :)

Installation

The CAPTCHA module can be installed and enabled with the normal instructions in the Installation Guide.

Permissions

The CAPTCHA module adds two new permissions to the permissions page, which can be accessed by going to admin/user/permissions in Drupal 6 or admin/people/permissions in Drupal 7. The two new permissions are 'administer CAPTCHA settings' and 'skip CAPTCHA'. The 'administer CAPTCHA settings' permission gives the user access to the pages admin/user/captcha in Drupal 6 or admin/config/people/captcha in Drupal 7.The 'Skip CAPTCHA' permission tells Drupal not to show or require a CAPTCHA for the specified role.

Page status

Needs copy/style review

Log in to edit this page

About this page

Drupal version
Drupal 6.x, Drupal 7.x
Level
Beginner
Audience
Site administrators, Site builders

Site Building Guide

Drupal’s online documentation is © 2000-2013 by the individual contributors and can be used in accordance with the Creative Commons License, Attribution-ShareAlike 2.0. PHP code is distributed under the GNU General Public License. Comments on documentation pages are used to improve content and then deleted.