Readme
No bots with no captcha. Easy and fast way to secure your django forms with no using of damned, hated by everyone captcha.
Include nocaptcha in your settings' installed apps
INSTALLED_APPS = ( ... 'nocaptcha', ... )
Include nocaptcha in your form. Add secret password, that would be used in md5 hash and min_time value - the shortest time, that could be possible to fill your form.
from nocaptcha.forms import NoCaptchaForm
class ContactForm(NoCaptchaForm, forms.Form): secret_password = "NoCaptcha rocks!" min_time = 5 name = forms.CharField(label="Name") message = forms.CharField(label="Message", widget=forms.Textarea)
From now on all the fieldnames in your form will be encoded into a md5(timestamp + fieldname + secret_password). The timestamp field will be created with the timestamp of the page initial get. If the form will be posted in less then min_time, the error will be raised. There will be added a few honeypots with tempting names like "name" or "password" hidden with "display: none" style. If any of them will be filled, the error will be raised. The honeypots are taken as sample from list of honeypots and their order is shuffled.
With these changes, the chance that any bot would automatically pass through your form is minimaised to zero. So stop using tha damn, hated by everyone captcha. Use nocaptcha.
Django >= 1.1.1
FAQs
No bots with no captcha in Django forms.
We found that nocaptcha demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
CISA launched a new project called Vulnrichment to enrich CVEs with details that help prioritize patching and mitigation efforts, as the NVD backlog of unenriched CVEs awaiting analysis surpasses 10,000.
Security News
Socket is joining forces with CISA and other industry leaders at the RSA Conference to sign the Secure by Design pledge, committing to uphold the highest security standards in our products.
Research
The Socket research team breaks down a sampling of malicious packages that download and execute files, among other suspicious behaviors, targeting the popular Discord platform.
