前言介紹
- 這款 WordPress 外掛「By MountDev: Cloudflare Turnstile」是 2025-10-20 上架。 目前已經下架不再更新，不建議安裝使用。
- 目前有 30 個安裝啟用數。
- 上一次更新是 2025-11-17，距離現在已有 101 天。
- 外掛最低要求 WordPress 5.0 以上版本才可以安裝。
- 外掛要求網站主機運作至少需要 PHP 版本 7.4 以上。
- 尚未有人給過這款外掛評分。
- 還沒有人在論壇上發問，可能目前使用數不多，還沒有什麼大問題。
外掛協作開發者
外掛標籤
spam | captcha | security | turnstile | cloudflare |
內容簡介
以下是文章的總結：
- Cloudflare Turnstile 是一個下一代 CAPTCHA 解決方案，保護您的 WordPress 網站而不影響用戶體驗。
接下來是一組問題與答案：
1. Cloudflare Turnstile 和傳統 CAPTCHAs 有什麼不同之處？
- Cloudflare Turnstile 在背景中工作，用戶不需要辨識扭曲文字或辨識交通燈，提供更好的用戶體驗。
2. Cloudflare Turnstile 的隱私政策如何？
- 該外掛以隱私為首要考量，不會跨網站追蹤用戶或收集不必要的個人資料。
3. Cloudflare Turnstile 提供了哪些特點來提高網站性能？
- 這款外掛被優化以提供輕量級和快速的性能，不會拖慢您的網站或添加多餘的東西。
4. Cloudflare Turnstile 在哪些情況下完全免費使用？
- 它完全免費用於大多數情況，您可以使用這個功能強大的機器人檢測技術來保護您的網站。
5. Cloudflare Turnstile 與哪些 WordPress 網站兼容，並能支持哪些插件？
- 它能與任何 WordPress 網站兼容，並支持 WooCommerce、Contact Form 7、Elementor Pro 和 Fluent Forms 等熱門插件。
6. 如何利用 Cloudflare Turnstile 保護您的 WooCommerce 商店？
- 您可以啟用 Turnstile 在登錄、註冊、密碼重置、結帳和支付訂單表單上，甚至可以設置它僅對訪客結帳顯示，以確保註冊用戶的流暢體驗。
7. Cloudflare Turnstile 如何與第三方表單插件整合？
- 透過一個點擊即可在所有表單上啟用 Turnstile，或選擇性地保護特定表單。
8. 這個插件如何管理 WordPress Multisite 網絡？
- 這個插件完全兼容並且可以獨立配置每個網站。
原文外掛簡介
Tired of annoying CAPTCHAs that frustrate your visitors? Say goodbye to distorted text puzzles and hello to Cloudflare Turnstile – the next-generation CAPTCHA solution that protects your WordPress site without compromising user experience.
By MountDev: Cloudflare Turnstile brings enterprise-grade bot protection to your WordPress site with zero hassle. Powered by Cloudflare’s cutting-edge Turnstile technology, this plugin seamlessly integrates with your existing forms to stop spam, prevent automated attacks, and protect your site – all while keeping your legitimate users happy.
Why Choose Cloudflare Turnstile?
Better User Experience
Unlike traditional CAPTCHAs that force users to decipher distorted text or identify traffic lights, Cloudflare Turnstile works invisibly in the background. Most legitimate users won’t even notice it’s there – they’ll just submit their forms and move on. No more frustrated visitors abandoning your registration or checkout process.
Privacy-First Approach
Cloudflare Turnstile is built with privacy in mind. It doesn’t track users across sites or collect unnecessary personal data. Your visitors’ privacy is respected, and you stay compliant with modern privacy regulations.
Lightweight & Fast
This plugin is optimized for performance. It won’t slow down your site or add bloat to your WordPress installation. The Turnstile widget loads efficiently, and you have full control over script loading behavior to optimize for your specific needs.
Enterprise Security, Free to Use
Leverage the same powerful bot detection technology that protects millions of websites worldwide. Cloudflare’s advanced algorithms analyze visitor behavior to distinguish between humans and bots – and it’s completely free for most use cases.
Perfect for Every WordPress Site
Whether you’re running a simple blog, a membership site, an online store, or a complex multi-site network, this plugin has you covered. It integrates seamlessly with WordPress core forms and extends support to popular plugins like WooCommerce, Contact Form 7, Elementor Pro, and Fluent Forms.
E-commerce Protection
Protect your WooCommerce store from fake registrations, fraudulent checkouts, and spam orders. Enable Turnstile on login, registration, password reset, checkout, and pay-for-order forms. You can even configure it to only appear for guest checkouts, keeping the experience smooth for your registered customers.
Form Builder Integration
Using Contact Form 7, Elementor Pro Forms, or Fluent Forms? No problem. Enable Turnstile across all your forms with a single click, or selectively protect specific forms. You have complete control over where and how protection is applied.
Multisite Ready
Managing a WordPress Multisite network? This plugin is fully compatible and can be configured independently for each site in your network.
Supported Forms
WordPress Core
Login Form
Registration Form
Password Reset Form
Comment Form
WooCommerce
Login Form
Registration Form
Password Reset Form
Checkout Form
Pay for Order Form
Third-Party Form Plugins
Contact Form 7 (all forms or specific forms via shortcode)
Elementor Pro Forms (all forms)
Fluent Forms (all forms with option to exclude specific form IDs)
Additional Features
Fully compatible with WordPress Multisite environments
Customizable widget positioning for different form types
Guest checkout only option for WooCommerce
Powerful Features, Simple Configuration
Visual Customization – Choose between light, dark, and auto themes to perfectly match your site’s design aesthetic. The widget blends seamlessly into your forms.
Global Language Support – Set the preferred display language for the Turnstile widget to match your audience. Provide a localized experience for your international visitors.
Flexible Appearance Modes – Configure the widget to always be visible, or use managed/non-interactive modes where it only appears when suspicious activity is detected. Balance security with user experience.
Form Submission Control – Enable submit button locking to prevent users from submitting forms until Turnstile validation is complete. Ensure every submission is verified.
Branded Error Messages – Customize the error message displayed when validation fails. Maintain your brand voice even in error states and provide helpful guidance to users.
Precise Widget Positioning – Control exactly where the Turnstile widget appears on different form types. Place it before or after buttons, within specific form sections, or wherever makes the most sense for your layout.
Built-in Credential Testing – Verify your Cloudflare API keys are working correctly with one click. No more guessing if your configuration is correct – get instant confirmation.
Performance Optimization – Enable script deferral to optimize page load times. The plugin is designed to be lightweight and won’t bog down your site.
Granular Form Control – Enable protection globally across all forms of a certain type, or selectively protect individual forms. You decide the level of security for each form.
Guest Checkout Options – For WooCommerce stores, optionally show Turnstile only for guest checkouts while keeping the experience frictionless for logged-in customers.
Developer Friendly – Clean, well-documented code that follows WordPress coding standards. Hooks and filters available for advanced customization.
Getting Started
You can have Cloudflare Turnstile protecting your WordPress forms in less than 5 minutes. Here’s how:
Step 1: Get Your Cloudflare Turnstile Keys
Head over to your Cloudflare dashboard and create a free Turnstile site. You’ll receive a Site Key and Secret Key – these are like your plugin’s credentials to communicate with Cloudflare’s verification service. Don’t worry, it’s completely free for most websites.
Step 2: Install and Activate
Install this plugin just like any other WordPress plugin. You can upload it manually or install it directly from the WordPress plugin directory. Activate it, and you’ll be automatically redirected to the settings page.
Step 3: Enter Your Keys
Paste your Site Key and Secret Key into the API Configuration tab. This connects your WordPress site to Cloudflare’s Turnstile service.
Step 4: Choose Your Forms
Navigate to the Integrations tab and select which forms you want to protect. You can enable Turnstile on WordPress login forms, WooCommerce checkout, Contact Form 7 submissions, and more. Enable as many or as few as you need.
Step 5: Customize (Optional)
Visit the General Settings tab to customize the widget’s appearance, language, and behavior. Want a dark theme? Done. Need it in Spanish? No problem. Prefer the widget to only appear when necessary? You got it.
Step 6: Test It
Click the TEST CREDENTIALS button to verify everything is configured correctly. You’ll get instant feedback confirming your setup is working.
Step 7: You’re Protected!
That’s it! Your forms are now protected by enterprise-grade bot detection. Sit back and watch as spam submissions drop to zero while your legitimate users breeze through without frustration.
External Services
This plugin connects to Cloudflare Turnstile, a third-party captcha service, to provide spam protection and bot detection for your WordPress forms.
What the service is and what it is used for
Cloudflare Turnstile is a privacy-friendly captcha alternative that helps protect your website forms from spam submissions and automated bot attacks. It replaces traditional CAPTCHAs with a more user-friendly verification system.
What data is sent and when
When a user interacts with a protected form, the plugin sends the Turnstile response token to Cloudflare’s verification endpoint (https://challenges.cloudflare.com/turnstile/v0/siteverify) for validation
The plugin loads Cloudflare’s Turnstile JavaScript API (https://challenges.cloudflare.com/turnstile/v0/api.js) to render the captcha widget
Data sent includes: the response token, your site’s secret key, and the user’s IP address (as part of the verification process)
This occurs every time a user submits a form that has Turnstile protection enabled
Service provider information
Service: Cloudflare Turnstile
Provider: Cloudflare, Inc.
Terms of Service: https://www.cloudflare.com/terms/
Privacy Policy: https://www.cloudflare.com/privacypolicy/
Turnstile Documentation: https://developers.cloudflare.com/turnstile/
User consent and configuration
By enabling this plugin and configuring Turnstile on your forms, you acknowledge that user interactions with protected forms will be processed by Cloudflare’s service. Users are not required to create accounts or provide personal information beyond what’s necessary for form submission verification.
各版本下載點
- 方法一：點下方版本號的連結下載 ZIP 檔案後，登入網站後台左側選單「外掛」的「安裝外掛」，然後選擇上方的「上傳外掛」，把下載回去的 ZIP 外掛打包檔案上傳上去安裝與啟用。
- 方法二：透過「安裝外掛」的畫面右方搜尋功能，搜尋外掛名稱「By MountDev: Cloudflare Turnstile」來進行安裝。
（建議使用方法二，確保安裝的版本符合當前運作的 WordPress 環境。
1.0.0 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | trunk |
延伸相關外掛（你可能也想知道）
SiteGuard WP Plugin 》版本: 1.6.7, , 您可以在日文網頁和英文網頁上找到文件、常見問題和更詳細的資訊。 , 安裝SiteGuard WP Plugin後，WordPress安全性會得到提高。, 本外掛是一...。
Really Simple CAPTCHA 》Really Simple CAPTCHA 並不是獨立的外掛，而是設計可以與其他外掛一起使用的。它最初是為 Contact Form 7 設計製作的，但是您也可以使用它與您自己的外掛搭...。
CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 》這個簡單的外掛模組增強了優秀的Contact Form 7 (CF7) 外掛，加入基本的蜜罐反垃圾功能，以防止垃圾機器人，而無需使用醜陋的 captcha 碼。, 蜜罐的基本原理...。
Spam protection, Honeypot, Anti-Spam by CleanTalk 》Forms spam filter, Plugin extends spam protection for Gravity Forms. It filters spam submissions for each form created with Gravity Forms., MemberP...。
Advanced Google reCAPTCHA 》Advanced Google reCAPTCHA可以保護您的WordPress網站免受垃圾評論和暴力攻擊。透過這個外掛，您可以輕鬆地在WordPress評論表單、登入表單和其他表單中加入Go...。
Simple CAPTCHA Alternative with Cloudflare Turnstile 》輕鬆地將 Cloudflare Turnstile 添加到您的 WordPress 網站中的所有表單中，以保護它們免受垃圾郵件的影響！, 一個用戶友好、保護隱私的 reCAPTCHA 替代方案...。
Login Lockdown & Protection 》Login LockDown 記錄每次失敗的登入嘗試的 IP 位址和時間戳記。如果在短時間內來自相同 IP 範圍的嘗試次數超過一定數量，那麼該 IP 位址的所有登入請求都會被...。
Gravity Forms Zero Spam 》這個 Gravity Forms 的外掛使用不會打擾使用者的防 spam 措施來封鎖垃圾郵件。您不需要進行任何設定或組態，只需要啟用這個外掛！, Gravity Forms 蜜罐欄位沒...。
reCaptcha by BestWebSoft 》reCaptcha 外掛是一個有效的安全解決方案，保護你的 WordPress 網站表單免於遭受垃圾郵件攻擊，同時讓真實使用者更容易通過驗證。它可以用在登入、註冊、密碼...。
Contact Form 7 Captcha 》使用這個外掛，您需要透過 Google 網站註冊 API 金鑰：https://www.google.com/recaptcha/admin, 此外掛實現了「我不是機器人」複選框。在生成金鑰時，請選擇...。
CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress 》WordPress 網站最強大又易於使用的驗證碼解決方案。, 在 WordPress 網站的表單上加上驗證碼。使用 CAPTCHA 保護 WordPress 網站和電子商店免受垃圾留言、自動...。
Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) 》在你的Contact Form 7表單中添加一個SVG圖像驗證和蜜罐。這個驗證符合GDPR要求，因為圖像是內嵌的SVG格式，所以這個外掛程序不會像Google的ReCAPTCHA那樣通過...。
Wordfence Login Security 》WORDFENCE 登入安全性, Wordfence 登入安全性包含在完整的 Wordfence 插件中發現的功能子集：雙因素驗證、XML-RPC 保護和登入頁 CAPTCHA。, 你正在尋找全面的...。
hCaptcha for WP 》hCaptcha 是 reCAPTCHA 的替代方案，以保護使用者的隱私為主要考量。, 需要阻擋機器人？hCaptcha 提供更佳的防止垃圾訊息和濫用的保護性措施，同時保護使用者...。
ReCaptcha Integration for WordPress 》在您的部落格中整合 reCaptcha，支援無 Captcha 和舊式 recaptcha。, 提供註冊、登入、評論表單和 Ninja Forms 的即插即用整合, 以及透過插件 API 進行自行整...。