About this plugin
RIS Cloudflare CAPTCHA adds the modern, privacy-first Cloudflare Turnstile CAPTCHA to your WordPress site. Stop bots, spam comments, and brute-force login attacks without annoying your visitors with image puzzles or Google reCAPTCHA.
Unlike legacy CAPTCHAs, Cloudflare Turnstile runs completely in the background, never asks visitors to click traffic lights or type distorted text, and protects visitor privacy.
Why Choose RIS Cloudflare CAPTCHA?
- Privacy-friendly – No user tracking, no cookies, no personal data collection.
- User-friendly – Most visitors never see a challenge; it’s invisible by default.
- Lightweight – Tiny footprint, no external dependencies, no bloated JS bundles.
- Free – Powered by Cloudflare Turnstile, which is 100% free for unlimited use.
- Universal – Protects WordPress login, registration, comment, lost-password, and WPForms.
- Developer-friendly – Shortcode, PHP function, and a verification filter for custom forms.
- Multilingual – Supports 11 widget languages including English, Spanish, French, German, Bengali, Hindi, Arabic, Chinese, Japanese, and more.
- Customizable – Light, dark, or auto theme; visible, invisible, or interaction-only mode.
Features
- Drop-in Turnstile widget on:
- WordPress login form
- WordPress registration form
- WordPress lost password form
- WordPress comment form
- WPForms (all forms)
- Server-side token verification for every form (not just client-side).
- Secure nonce checks on every form submission.
- Test Connection button to instantly verify your API keys.
- Per-form enable/disable checkboxes.
- Light, dark, or auto theme matching.
- Visible, invisible (“execute”), or interaction-only appearance.
- Custom widget language selection.
- Tabbed admin settings page (Settings / Help / About).
- Shortcode: [ris_turnstile action="contact"] for custom forms.
- Developer filter: ris_cf_captcha_verify_response for custom verification.
- Full uninstall cleanup (deletes all options on plugin removal).
- Multisite compatible.
- Translation ready (.pot, /languages folder).
- Proper WordPress coding standards, sanitization, escaping, and capability checks.
How It Works
- Install and activate the plugin.
- Get free Turnstile keys from your Cloudflare Dashboard.
- Paste your Site Key and Secret Key into the plugin settings.
- Tick the forms you want to protect.
- Save. Done.
Shortcode
Use the widget on any page or custom form:
[ris_turnstile action="contact"]
Or in PHP:
>
Custom Form Verification (Developers)
Hook into the verification filter:
add_filter( 'ris_cf_captcha_verify_response', function( $is_valid, $token, $ip ) { // Your custom checks here. return $is_valid; }, 10, 3 );
Privacy
This plugin:
* Does not set any cookies.
* Does not track users.
* Does not store any personal data.
* Sends the visitor’s IP address to Cloudflare only for the verification request, as required by the Turnstile API.
* Does not send any data to any third party other than Cloudflare.
GDPR, CCPA, and privacy-law friendly.
Related Plugins
- Real IT Solution – https://www.realitsolution.com/
Credits
- Developed by Real IT Solution – Md Taufiqur Rahman.
- Powered by Cloudflare Turnstile.
- Icons by WordPress Dashicons.
Support
- Documentation: https://wordpress.org/plugins/ris-cloudflare-captcha/
- Support forum: https://wordpress.org/support/plugin/ris-cloudflare-captcha/
- Author website: https://www.realitsolution.com/