As I work on my first WordPress theme, I am making efforts to prevent spam in the comment section. I have followed all the instructions provided by the Google PHP API, and while the reCAPTCHA appears correctly, I am facing issues with validation. It seems that users are still able to post comments even after entering incorrect words in the reCAPTCHA.
In addition to resolving this problem, I am also looking for a way to display the error message alongside the submit button.
Below is an excerpt from the comments.php form:
<form class="comments-form" action="verify.php" method="post" id="commentform">
...
<?php
require_once('recaptchalib.php');
$publickey = "my_public_key";
echo recaptcha_get_html($publickey, $error);
?>
<p>
<input type="submit" name="submit" id="submit" tabindex="5" value="Submit" />
<label for="submit"><?php echo $error ?></label>
<input type="hidden" name="comment_post_ID" value="<?php echo $id; ?>" />
</p>
<?php do_action('comment_form', $post->ID); ?>
</form>
And here is the code snippet from verify.php:
<?php
require_once('recaptchalib.php');
$privatekey = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"; //secret key
$resp = recaptcha_check_answer ($privatekey,
$_SERVER["REMOTE_ADDR"],
$_POST["recaptcha_challenge_field"],
$_POST["recaptcha_response_field"]);
if (!$resp->is_valid) {
// Handling incorrect CAPTCHA entry
$error = $resp->error;
} else {
// Code to handle successful verification
echo "reCAPTCHA verified!";
//do_action("wp-comment-post.php");??????I DON´T KNOW IF THIS IS OK.
}
?>
UPDATE: Despite setting the form action as "verify.php," it only redirects me to a blank page. Can anyone guide me on the correct action to use?