https://docs.whmcs.com/9-1/tags/captchas/Recent content in captchas onHugo -- gohugo.iohttps://docs.whmcs.com/9-1/troubleshooting/troubleshoot-the-client-area/troubleshooting-the-client-area/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/troubleshooting/troubleshoot-the-client-area/troubleshooting-the-client-area/Index page linking to Client Area display issue, shopping cart and store, captcha, and domain ordering troubleshooting articles.https://docs.whmcs.com/9-1/orders/spam-orders/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/orders/spam-orders/Lists methods to reduce spam orders: third-party firewalls, reCAPTCHA v3 or hCaptcha, banning email domains, disabling client registration and presales forms, a custom human-verification client field, MaxMind’s automatic fraud detection, and Only Auto Provision for Existing.https://docs.whmcs.com/9-1/system/captcha-protection/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/system/captcha-protection/Compares the verification-code, checkbox (reCAPTCHA v2/hCaptcha), and invisible (reCAPTCHA v3/Invisible hCaptcha) captcha types, and gives the steps to select a Captcha Type, enter the Site Key and Secret Key, and set a score threshold under General Settings > Security.https://docs.whmcs.com/9-1/troubleshooting/troubleshoot-the-client-area/captcha-verification-failures/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/troubleshooting/troubleshoot-the-client-area/captcha-verification-failures/Documents “Captcha verification failed” errors for hCaptcha and reCAPTCHA v3, caused by an overly restrictive score threshold, with fixes for both captcha types and a database command to disable captchas if locked out of the Admin Area.https://docs.whmcs.com/9-1/system/system-tutorials/enable-default-captchas/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/system/system-tutorials/enable-default-captchas/Gives the steps to select Default (6 Character Verification Code) for Captcha Type and choose locations under Captcha for Select Forms on the Security tab of General Settings, noting the GD2 server requirement.https://docs.whmcs.com/9-1/system/system-tutorials/enable-hcaptcha/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/system/system-tutorials/enable-hcaptcha/Steps through selecting hCaptcha or Invisible hCaptcha for Captcha Type, authorizing the WHMCS domain in the hCaptcha account, entering the Site Key and Secret Key, setting the hCaptcha Score Threshold, and choosing Captcha for Select Forms locations on the Security tab of General Settings.https://docs.whmcs.com/9-1/system/system-tutorials/enable-recaptcha-v3/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/system/system-tutorials/enable-recaptcha-v3/Steps through selecting reCAPTCHA v3 for Captcha Type, registering a Score based (v3) site in the Google reCAPTCHA admin console, entering the Site Key and Secret Key, setting the reCAPTCHA Score Threshold, and choosing Captcha for Select Forms locations on the Security tab of General Settings.https://docs.whmcs.com/9-1/troubleshooting/troubleshoot-the-client-area/invalid-site-key-errors/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/troubleshooting/troubleshoot-the-client-area/invalid-site-key-errors/Documents the “Invalid domain for site key” reCAPTCHA/hCaptcha error caused by an unauthorized domain, often after migrating domains, with fixes to add the domain in Google or hCaptcha settings, switch to default captchas, or disable captchas via a database update.https://docs.whmcs.com/9-1/system/general-settings/general-settings-security/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/system/general-settings/general-settings-security/Documents Email Verification, Captcha Form Protection and Captcha Type options (Default, reCAPTCHA v2/v3, hCaptcha) with their Site/Secret Key and score threshold fields, Auto Generated Password Format, Minimum Password Length and Password Reuse Limit (with their PCI DSS-mandated lower limits of 12 and 4), Minimum User Password Strength, Failed Admin Login Ban Time, Whitelisted IPs, Trusted Proxies, Proxy IP Header, API IP Access Restriction, CSRF Token settings, and the Cron HTTP Access Restriction allowlist that gates direct HTTP requests to crons/cron.php.