Recaptcha V2 not working correctly

[Tezzflyer]

Hi there, We are using Sellerdeck 16.0.3 RBUC, and having problems with recaptcha on the contact us page.
The form works OK but when the 'I am not a robot' button is clicked there is no challenge or verification we used to get a grid of pictures to tick - but now nothing) the big green tick appears and then click send we get the contents of the form via email.
we are now getting LOTS of spam.
I have checked the public and private keys are correct and in the right boxes, and also checked they are correct using the design / variables library.
the recaptcha admin console tells me "We detected that your site isn't verifying reCAPTCHA solutions. This is required for the proper use of reCAPTCHA on your site."
looking at the developer site doesnt enlighten me any (I don't understand half the stuff on there!).
Really stumped now. Has anyone got any suggestions where to look next?

as ever any help would be very much appreciated

Thanks

[Mike Hughes]

I think there might be a couple of things happening. Best to follow up with Sellerdeck support. I see the same thing on V18.

Google say the basic script must use https and that verifying the users reponse should be: API Request URL: https://www.google.com/recaptcha/api/siteverify Method: POST

What Sellerdeck is doing:is calling : my (@Response) = ACTINIC::HTTP_SendAndReceive('www.google.com', 80, '/recaptcha/api/verify', $sContent, 'POST');

The two problems I see are:

1. It doesn't look like the verify code is using https.

2. The code is calling 'verify' rather than 'siteverify'

I'm using V18 and see the same message from Google in my recaptcha console.

Mike

[Tezzflyer]

Thanks Mike, will try support!

[Mike Hughes]

Although looking at the code in more detail I'm not sure under what conditions it should be verified. The Sellerdeck code only triggers the verification subroutine if the g-recaptcha-response is not blank which seems odd as I'm not convinced it should ever be blank but on the other hand if it is blank how can you verify it? I can't help wondering if the response parsing code is also not working correctly.

As to the functioning, The recaptcha itself should still be working OK. The reason you aren't seeing the picture tiles is most likely that google recognises you and decides a tick is fine. You can test this by trying to complete the contact us form from an incognito window.

You might be getting spam as a result of recaptcha solvers getting better.

Mike

[Tezzflyer]

Well it looks like you are right about recaptcha solvers getting better, as you suggested, filling in the form from an incognito window brings up the images!
I will now stop pulling my hair out!
Many thanks Mike
your a star!

[Mike Hughes]

As another add on to this, it looks to me as if the verification subroutine is never called as the code that might call it is commented out.

So all a bit odd. Google seems to want the response to be verified but I can't see anyway the sellerdeck code will ever do it. All this is in Mailform.pl

[Tezzflyer]

Everything seems to be working OK now, and the verification warning from google has stopped.
One thing I did which might have been the solution - in the Design library > variables. I noticed the 'upload' checkbox on the properties page for the ReCaptcha Keys was not checked, so ticking the box may have been the solution.