Download the PHP package bbysaeth/typo3-altcha without Composer

On this page you can find all versions of the php package bbysaeth/typo3-altcha. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Informations about the package typo3-altcha

TYPO3 Extension ALTCHA

This TYPO3 extension integrates ALTCHA Widget v3 into TYPO3 ext:form. It uses ALTCHA's proof-of-work approach to protect forms against spam and abuse without visual puzzles or tracking-based captcha techniques.

Features

Installation

Install this TYPO3 extension using Composer:

Choose one integration method and update the database schema via the install tool:

This TYPO3 extension is licensed under the GNU General Public License Version 2 (GPLv2).

Configuration

TypoScript Integration: Site Set or Static Template

This extension supports both TYPO3 integration approaches:

Do not load both at the same time. Use one method per site.

Supported TYPO3 Versions

Extension Configuration

HMAC Secret Key (basic.hmac [string])
HMAC secret key for challenge generation. If not defined, TYPO3's encryption key will be used.

TypoScript Configuration Settings

The following TypoScript settings are available:

Site Set Settings

When you integrate via the site set, the same options are available as site settings. They carry an altcha. prefix instead of the plugin.tx_altcha. one, because site settings share a single namespace across all sets of an installation:

Renamed in 2.0.0. These settings previously used bare names (minimumComplexity instead of altcha.minimumComplexity). If you are upgrading from 1.x, rename the keys in your site configuration – unprefixed keys are ignored and the settings silently fall back to their defaults. Installations using the static template are not affected.

Form Caching and Challenge Generation

Important: This extension automatically uses an uncached endpoint (page type 1768669000) for local challenge generation to prevent form caching issues. This avoids reused challenges in cached forms and keeps ALTCHA Widget v3 compatible with TYPO3 page caching.

The endpoint URL is generated for the current site language, so it is /?type=1768669000 on a single-language site and /de/?type=1768669000 on a site whose languages use a path prefix.

No additional configuration is required – the extension handles this automatically.

Cleaning Up Challenges

Every challenge handed to a client is stored in tx_typo3altcha_domain_model_challenge, so that a solution can only be redeemed once. The row is worthless as soon as the signed expiry has passed – it only has to outlive the challenge itself. Schedule one of the two options below, otherwise the table grows with every form view.

Console command

Deletes everything older than plugin.tx_altcha.expires seconds, so it can be run as often as you like and honours the configured expiry to the second. --dry-run reports what would be deleted without touching anything, --include-solved-challenges additionally removes rows that were already redeemed. Deletion happens in a single statement, so memory usage does not depend on the number of rows.

Core scheduler task

The extension registers the challenge table with the core's TableGarbageCollectionTask, so you can pick Table garbage collection in the scheduler module instead of running the command. This requires typo3/cms-scheduler.

Mind the day count. The registration ships expirePeriod: 1, but the core task only uses that value when the task is configured to clean up all tables. If you select this single table in the task, its own Number of days field decides instead. Either way the granularity is whole days, which is coarser than the command but safe: challenges expire after seconds and the row merely has to survive that long.

Self-hosted ALTCHA Server

You can use a self-hosted Altcha server instead of local challenge generation. Configure the following TypoScript settings:

Using the Proxy Endpoints (Recommended)

When both challengeUrl and apiKey are configured, the extension automatically uses built-in proxy endpoints that:

Direct URL Mode (Optional)

If you set only challengeUrl without apiKey, the widget will connect directly to your server. This is suitable for same-origin servers using session cookies or public endpoints.

Local Mode (Default)

If neither challengeUrl nor verifyUrl are set, the extension uses:

Widget v3 Notes

Customizing ALTCHA Texts

You probably do not need this for translations. Widget v3 ships 62 locales, including a complete German one (label: "Ich bin kein Roboter"). The widget resolves the language from <html lang>, which TYPO3 fills with the site language, so the widget is translated out of the box. Only override texts if you want different wording than ALTCHA's defaults.

The texts are registered in the widget's global i18n store. Several widgets on one page therefore share the same texts – per-widget wording is not supported.

1. Create Your Own Partial

Create a new file at the following location in your extension or site package:

Replace my_extension with the key of your sitepackage or custom extension.

2. Add YAML Configuration to Register Partial Path

To let TYPO3 know about your new partial path, extend the YAML configuration of the Form Framework. In your sitepackage, add the following file:

Configuration/Form/Overrides/form_editor.yaml

The key matters. Fluid resolves partials from the highest key downwards, and this extension registers its own partial path as 175 (see Configuration/Yaml/FormSetup.yaml). Your key must be higher than 175 – with a lower key such as 20 the extension's partial wins and your override is silently ignored.

In your TypoScript setup:

This extension registers its own YAML as 175 from ext_localconf.php, so you do not have to repeat that line – just make sure your key is higher than 175 so your YAML is loaded afterwards.

Available Translation Keys

You can define any of the following keys inside your AltchaTranslations.html. Keys you leave out keep the value from ALTCHA's own locale, so a partial override is fine:

Example with Static Texts

EXT:my_extension/Resources/Private/Frontend/Partials/AltchaTranslations.html:

Example with TYPO3 Localization

If you want to use TYPO3’s localization, add the relevant labels to your locallang.xlf.

Partial Example:

License

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.

All versions of typo3-altcha with dependencies

PHP Build Version
Package Version
Requires typo3/cms-backend Version ^13.4 || ^14.0
typo3/cms-core Version ^13.4 || ^14.0
typo3/cms-extbase Version ^13.4 || ^14.0
typo3/cms-form Version ^13.4 || ^14.0
typo3/cms-fluid Version ^13.4 || ^14.0
altcha-org/altcha Version ^2.0
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package bbysaeth/typo3-altcha contains the following files

Loading the files please wait ...