Beschrijving
Bot Protection with Turnstile lets you drop-in Cloudflare’s privacy-focused, no-CAPTCHA challenge on the most common attack surfaces of a WordPress site:
- Core WordPress forms – Login, registration, password reset, and comment forms.
- WooCommerce – Protect checkout, login, registration, and password reset forms.
- bbPress – Secure forum registration, login, and topic creation forms.
- Contact Form 7 – Add Turnstile to your CF7 forms to block spam submissions.
- Accept Stripe Payments – Protect checkout and payment pop-up forms.
- Simple Download Monitor – Secure download buttons and squeeze forms.
- Simple Shopping Cart – Add Turnstile to your shopping cart plugin’s manual checkout forms.
- WP Express Checkout – Protect checkout 100% discount checkout forms with Turnstile.
Just add your Turnstile Site Key and Secret Key, choose the forms you want to protect, and you’re done. No more subjecting your users to image puzzles or accessibility headaches.
Turnstile can generate multiple types of non-intrusive challenges to verify users are human, all without showing visitors a puzzle.
Highlights
- Zero-friction, user-friendly bot protection.
- A free reCAPTCHA alternative for WordPress.
- Works even when visitors are behind ad-blockers or privacy extensions.
- Granular toggles to enable/disable on individual forms.
- Debug logging feature.
- Fully translatable and developer-friendly with action/filter hooks.
- Road-map for upcoming integrations with other popular plugins.
Getting Started
It’s quick and easy to get started with the Bot Protection plugin.
- Generate a Site Key and Secret Key in your Cloudflare account, then enter them in the plugin’s settings page.
- Choose which forms you want to protect with Turnstile and click Save.
- Turnstile challenges will automatically appear on the selected forms to to block bots and spam.
For more detailed instructions, please see our setup guide.
External Services
This plugin integrates with the Cloudflare Turnstile CAPTCHA service to help protect WordPress forms from spam and automated abuse.
When a protected form (such as login, registration, or comment) is displayed, the plugin connects to Cloudflare Turnstile to generate a CAPTCHA challenge. When the form is submitted, Turnstile receives the user’s IP address and browser metadata to verify whether the submission is from a human or bot.
This service is provided by Cloudflare, Inc.:
– Terms of Service: https://www.cloudflare.com/terms/
– Privacy Policy: https://www.cloudflare.com/privacypolicy/
Schermafdrukken
WordPress login form example. 
WordPress registration form example. 
WordPress password reset form example. 
WordPress comment form example. 
Checkout form of the Accept Stripe Payments plugin.
Installatie
- Upload the plugin ZIP via Plugins Add New Upload Plugin, or install it directly from the WordPress.org repository.
- Activate Bot Protection with Turnstile via the Plugins menu.
- Navigate to Settings Turnstile.
- Enter your Site Key and Secret Key from the Cloudflare dashboard.
- Check the boxes for the forms and integrations you wish to protect.
- Save changes and test a form to confirm the Turnstile widget appears.
FAQ
-
Is it free to use?
-
Yes, Turnstile CAPTCHA is free to use. You just need a free Cloudflare account to get started. This plugin is also completely free.
-
Where do I get a Site Key and Secret Key?
-
Sign in to your Cloudflare account, add a Turnstile widget, and copy the credentials provided.
-
Is there a setup guide for this plugin?
-
Yes, you can view the plugin’s setup guide here
-
Does this slow down my site?
-
No. The Turnstile script is tiny and loaded from Cloudflare’s global edge network. It adds a negligible footprint.
-
Can I style or reposition the widget?
-
Yes – you can choose a theme and widget size in the settings menu.
-
I only need it on comments – is that possible?
-
Absolutely. Toggle off any forms you don’t wish to protect.
Beoordelingen
Er zijn geen beoordelingen voor deze plugin.
Bijdragers & ontwikkelaars
“Bot Protection with Turnstile” is open source software. De volgende personen hebben bijgedragen aan deze plugin.
Bijdragers
Vertaal “Bot Protection with Turnstile” naar jouw taal.
Interesse in ontwikkeling?
Bekijk de code, haal de SVN repository op, of abonneer je op het ontwikkellog via RSS.
Changelog
1.0.8
- Fixed a JS warning.
1.0.7
- Improved the Simple Download Monitor plugin’s integration.
1.0.6
- Compatibility with the Simple Download Monitor plugin’s download via link feature.
1.0.5
- Contact Form 7 plugin integration added.
- Simple Shopping Cart plugin integration added.
- WP Express Checkout plugin integration added.
1.0.4
- Added integration for WooCommerce.
- Displays a notice in the settings menu if a supported plugin is inactive.
- Added integration for the bbPress forum plugin.
- Suppresses the Stripe plugin’s CAPTCHA-disabled warning when Turnstile is enabled.
1.0.3
- Added a note for when the captcha is enabled in the settings page of the ASP or SDM plugins.
- Added new CSS code to the admin CSS file.
1.0.2
- Removed the use of inline tags.
- Added ‘External services’ section to the readme.txt file.
- Removed the debug logging to a local file inside the plugin folder.
1.0.1
- Output escaping improvement as per the plugin check report.
1.0.0
- Initial release version.