跳过 reCAPTCHA 图像挑战的方法 [英] Way to skip reCAPTCHA images challenge

问题描述

我正在我的一个网站上实施 reCAPTCHA，并且已成功实施.它工作正常.有时仅通过单击我不是机器人"才能完成 reCAPTCHA，但有时它会显示图像网格以选择正确的图像并完成验证码.

I am implementing reCAPTCHA on one of my websites and I have successfully implemented it. It is working fine. Sometime the reCAPTCHA gets completed only by clicking the "I'm not a Robot" but sometimes it shows the images grid to select the correct images and complete the captcha.

我只是想知道这是否可能.我们能否禁用图像选择挑战，以便仅通过单击我不是机器人"即可完成 reCAPTCHA.Google 显示图像网格的理论是什么?

I was just wondering if this possible or not. Can we disable the images selection challenge so the reCAPTCHA can be completed only by clicking the "I'm not a Robot". What is the theory of Google for showing the images grid?

我已经读过这个:防止 reCaptcha 多个图像选择但没有那里有足够的信息.

I have already read this : Prevent reCaptcha multiple image selections but there is not enough information there.

谢谢！

我在下面包含了 recaptcha/api.js.

<script src="https://www.google.com/recaptcha/api.js?onload=onloadCallbackAuto&render=explicit&hl=<?php echo $lang;?>" async defer >

我的 reCAPTCHA 代码如下:

My reCAPTCHA code is below:

    var onloadCallbackAuto = function() {
         /// do something....
    }
    var verifyCallback = function() {
         /// do something....
    }
    grecaptcha.render('gReCaptchaDiv', {
     'sitekey' : '<?php echo $siteKey;?>',
     'callback' : verifyCallback,
     'theme' : 'light'
    });

推荐答案

新的 Google reCaptcha 实现了一些复杂的算法来确定是否存在真实用户.使用的一些方法是检测请求重复性(如果有一个请求在一个特定来源的一小段时间内一次又一次地重复)、时间计数(自脚本初始化以来经过了多长时间)、光标事件(如移动和单击)、滚动事件、javascript 常见事件触发和 XHR 调用.

The new Google reCaptcha implements some sophisticated algorithms to decide if there is a real user or not. Some methods used are detection of request repeatedness (if there is a request repeating again and again in a small time period from one particular source), time counting (how long time passed since when the script was initialized), cursor events (like moving and clicking), scroll events, javascript common events triggering and XHR calls.

所有这些以及更多方法，结合了不可见的 reCaptcha，在 Checkbox reCaptcha 的情况下，其中一些检测方法也可以触发.如果算法检测到人类用户的异常情况，例如，在没有触发 mousemove 事件的情况下单击 reCaptcha 复选框，则不会评估为人类结果，因此 reCaptcha 必须依靠其他东西来确保有一个人在做事，而不是一个脚本机器人.

All these and many more methods, combine the invisible reCaptcha and in the case of the Checkbox reCaptcha, some of these detection methods get to trigger as well. If the algorithm detects something unusual for a human user, for example, clicking on the reCaptcha checkbox without the mousemove event to get triggered, then that will not evaluate to a human result and thus reCaptcha has to rely on something else to ensure that there is a human doing stuff and not a script bot.

答案是你无法避免.如果基本的 reCaptcha 方法失败，那么它必须做一些事情来提供保护.

The answer is that you cannot avoid it. If the basic reCaptcha method fails then it has to do something to provide protection.

请记住，您的应用程序的用户不会像您一样经常看到图像方法.我猜您在进行一些代码更新后正在做一些测试并一次又一次地尝试相同的事情，因此由于来自同一来源的重复性，您会更频繁地获得 reCaptcha 失败.

Keep in mind that the users of your application will not see the images method very often like you do. I guess that you're doing some testing and trying the same things again and again after doing some code updates, thus you get the reCaptcha failing more often due to the repeatedness from the same source.

这篇关于跳过 reCAPTCHA 图像挑战的方法的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！