Download the PHP package dskripchenko/yandex-smart-captcha without Composer
On this page you can find all versions of the php package dskripchenko/yandex-smart-captcha. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download dskripchenko/yandex-smart-captcha
More information about dskripchenko/yandex-smart-captcha
Files in dskripchenko/yandex-smart-captcha
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package yandex-smart-captcha
yandex-smart-captcha
Server-side validation of Yandex SmartCaptcha tokens for Laravel: a validation rule, a facade and a switch that turns verification off where you don't want it (local development, tests).
π English Β· δΈζ
Requirements
PHP 8.2β8.5 Β· Laravel 11 / 12 / 13.
Install
The service provider is auto-discovered. Publish the config if you want to edit it directly rather than through the environment:
Configure
YANDEX_SMART_CAPTCHA_ENABLE defaults to false, so a fresh install never
blocks a form until you have keys. Leave it off in tests and local development β
the rule then passes without calling Yandex.
| Key | Default | Meaning |
|---|---|---|
enable |
false |
Whether tokens are verified at all |
url |
https://smartcaptcha.yandexcloud.net |
Verification endpoint |
client_key |
β | Key used by the widget in the browser |
server_key |
β | Key used for server-side verification |
error_message |
Smart captcha validation error |
Message returned on a failed check |
connect_timeout |
2.0 |
Seconds to wait for the connection |
timeout |
5.0 |
Seconds to wait for the whole request |
fail_open |
false |
What to do when the endpoint cannot be reached |
When Yandex cannot be reached
Verification is an outgoing call made while a visitor's request is held open, so the endpoint has to be reachable from your server β not only from the visitor's browser. Two settings decide what happens when it is not.
The timeouts are bounded on purpose. Guzzle waits forever by default, and a hanging endpoint holds the worker with it; on a pooled runtime (Octane, RoadRunner, Swoole) a handful of held workers exhausts the pool, so an unreachable captcha service takes the whole site down with it.
fail_open is the policy choice, and it is a real trade in both directions:
false(default) β an unreachable endpoint counts as a failed check. Nothing gets through unverified, and every protected form stays closed until the service comes back.trueβ the submission is allowed. Choose it only where the captcha is one layer among several (rate limit, honeypot, timing), because anyone able to block the endpoint can then switch the captcha off by blocking it.
It applies to transport failures only. An endpoint that answered β with a
rejection or with an error status β has given a verdict, and fail_open never
overrides one.
Usage
As a validation rule
The rule reads the client's IP address from the request, so a token issued for another address is rejected.
Through the facade
License
MIT Β© Denis Skripchenko
All versions of yandex-smart-captcha with dependencies
ext-json Version *
dskripchenko/php-array-helper Version ^1.1
laravel/framework Version ^11.0 || ^12.0 || ^13.0
guzzlehttp/guzzle Version ^7.0