Captcha Integration

Shopware 5.3 introduced a brand new and more flexible captcha handling, which allows shop owners to configure captcha validation for more forms in the storefront. Before, only blog comments and article reviews could be secured with a captcha - now this applies to the customer registration and the newsletter registration. In addition to the old, regular captcha implementation, shop owners can now select between the following new validation methods for each shop or subshop individually.

Standard (Numbers and letters)

The customer is asked to enter an alphanumerical string into a form field. This method provides solid security against automated bots but increases the customers hurdle filling out the form because of the additional field.

Honeypot (invisible)

This solution adds an invisible field to the form that looks like a regular form field to a malicious spam bot. When the bot fills out the field, the captcha's validation fails. The advantage of this method is its significantly reduced intrusiveness on the customer.

No captcha

The respective shop is not secured by any captcha and forms can be submitted without any validation.

Settings and usage of the captcha

All settings regarding captchas can be configured individually for each shop or subshop right from within the Shopware backend in the basic settings.

Forms

In Basic Settings > Frontend > Captcha', the following settings are available:

• Captcha Method (1): Here, the captcha method can be configured. These various new method were explained in the paragraph before. If you choose the old method, the old implementation will be used in your shop, which represents the default of Shopware 5.2 or earlier. We recommend to not use this mode anymore.
• Diable after login (2): Activating this option will disable all captchas for your users if they are logged in.
• Captcha font color (R,G,B) (3): With this option, you can adjust the font color of the captcha.

Registration form

In Basic settings > Frontend > Login / Registration you can find the configuration what type of captcha validation should be used for the registration form.

Newsletter registration

In Basic settings > Additional settings > Newsletter you can configure what type of captcha validation should be used for the newsletter registration.

The new captcha component also allows developers to implement their own custom validation method. Have a look at the following DevDocs article where we explain how to integrate Google's ReCaptcha into Shopware.