內容簡介
GridXFlex Captcha Security 是一款自我託管的圖像 CAPTCHA 外掛，能有效保護網站的登入、註冊、找回密碼及留言表單，並透過隱形的 honeypot 層進一步增強安全性。所有 CAPTCHA 都在本地伺服器生成，無需第三方服務，確保用戶資料安全。
【主要功能】
• 自我託管圖像 CAPTCHA，無需額外 HTTP 請求
• 每個受保護表單的隱形 honeypot 欄位
• 可配置的字符類型、大小寫及長度
• 登入用戶可選擇隱藏留言 CAPTCHA
• 一次性挑戰令牌，每個代碼僅可嘗試一次
外掛標籤
開發者團隊
原文外掛簡介
GridXFlex Captcha Security adds a self-hosted image CAPTCHA, backed by a silent honeypot layer, to your site’s Login, Registration, Lost Password, and Comments forms.
Everything is generated on your own server using PHP’s built-in GD library. No requests are ever sent to a third-party service, no API keys are required, and no personal data is stored beyond a short-lived, one-time-use security token.
Features
Self-hosted image CAPTCHA (GD-generated, delivered inline as a base64 image — no extra HTTP request)
Silent honeypot field on every protected form, on by default
Per-form protection toggles: Login, Registration, Lost Password, Comments
Configurable character type (alphanumeric / letters / numbers), letter case, and length (3–6 characters)
Option to hide the comment captcha for logged-in users
One-time-use challenge tokens — each code can be attempted exactly once, then it’s gone
No PHP sessions, no cookies set by this plugin, no external requests, no tracking
Why no PHP sessions?
Older captcha plugins commonly call session_start() on every front-end request, even on pages that never show a captcha. That has a real performance cost, breaks under object-cache or load-balanced PHP-FPM pools without sticky sessions, and is incompatible with full-page caching. GridXFlex Captcha Security stores each challenge as a short-lived WordPress transient, keyed by a random token embedded in the form. The token is just a lookup key — the actual secret (a hash of the code) stays server-side — so it remains safe even on a cached page, and each challenge is deleted the instant it’s checked, pass or fail.
![Disable Comments – Remove Comments & Stop Spam [Multi-Site Support]](https://ps.w.org/disable-comments/assets/icon-256x256.png?rev=2509854){kind=icon}
