Google reCAPTCHA v3 1.0.0

A patch is being provided to add Google reCAPTCHA v3 spam and abuse protection to WHMCS v8.10.1 only.

This feature will be included in v8.11 and above.

If the reCAPTCHA v3 score is above the threshold, the form submission is blocked and an error is displayed "Recaptcha verification failed: Unknown error"

To apply the Hotfix:

1. Click "Download this Hotfix" to the right of this page.
2. Upload and extract the file to your WHMCS installation's directory.
   1. If you have customised your admin directory, make sure to upload the contents of `admin` to your custom admin directory.
   2. When asked to override files, select yes.
3. Go to https://www.google.com/recaptcha/admin
   1. Click + to register a new site
   2. Choose the `Score based (v3)` reCAPTCHA type.
   3. Enter your domain under the domains section.
   4. Click Submit
   5. Copy the Site Key and Secret Key that Google generated and enter them in WHMCS.
4. Return to WHMCS and to to Configuration > System Settings > General Settings > Security tab.
5. Enter the Google reCAPTCHA Site Key and Secret Key.
6. Check Shopping Card Checkout and Client Registration under reCAPTCHA for Select Forms.
7. For reCAPTCHA Score Threshold, enter the desired minimum score for reCAPTCHA verification. You can enter a value between 0 (least restrictive) and 1 (most restrictive). For example, `.5`.
8. Click Save Changes
9. Submissions will start to be recorded on the Google reCAPTCHA site, alongside a score for each threshold. Use this information to adjust the reCAPTCHA Score Threshold setting as necessary to block automated submissions.

Note: reCAPTCHA v3 adds a new setting "reCAPTCHA Score Threshold" at Configuration > System Settings > General Settings > Security tab.

For guidance setting this score, see: https://developers.google.com/recaptcha/docs/v3#interpreting_the_score

https://developers.google.com/recaptcha/docs/v3#interpreting_the_score

 https://developers.google.com/recaptcha/docs/v3#interpreting_the_score