WHMCS Feature Requests - Cloudflare Turnstile

sitesme commented 4th March 25

hCaptcha is NOT the answer. WHMCS TEAM: Please read what your customers want. Turnstile is free and looks better than any other similar competitor, without ruining the user's navigation experience.

I am using Cloudflare Turnstile for a while through the hook provided but I would rather prefer to remove it and have a native option just for this.

nichoooo commented 26th January

This WHMCS security idea is good. Reminds me of the fun of a classic Digimon RPG..Related Links: https://retrogameszone.com/category/pcecd

Edi commented 28th January 25

Hello WHMCS Team,

I requested Turnstile integration because hCaptcha has a lot of unfriendly things. If I use the free hCaptcha account, then hCaptcha will not have customization options, which means I have to pay them $1188 per year to get those customization options.
Turnstile is free, and if I use a free account, it will not force each visitor to go through complicated verification. Plus, Turnstile's UI is friendlier than Captcha.
This is why Cloudflare replaced hCaptcha with Turnstile.

Thank you a lot!

Michael commented 28th January 25

Hybula has a hook to add turnstile.
https://github.com/hybula/whmcs-turnstile

Or if you use Lagom2 theme I have a copy of it with modifications to work with Lagom2.
https://github.com/themikeambrose/whmcs-turnstile-lagom2

Edi commented 3rd March 25

Hooks can easily cause some strange issues. I think we should wait for the WHMCS team to make a decision.

sitesme commented 4th March 25

"Waiting" for WHMCS team to make a decision is likely to be a "No. We have other systems in place" answer.
We are using the hook because we really want to use Turnstile instead of anything else, and it is working fine for months.

Edi commented 4th March 25

Let me pump it up.

WHMCSUser commented 25th January 25

WHMCS really needs to add this. Other captchas ruin the user experience.

sitesme commented 3rd July 24

Looking forward for this implementation to replace Google Captcha...

Diego Sebastian commented 28th June 24

https://github.com/hybula
There we can see a hook to add Turnstile to whmcs.

xingxian wen commented 1st May 24

Hoping to come up with a solution

Uwe U.Inthanet commented 8th August 23

We use Cloudflare's Turnstile on the most of our 50+ websites.
The integrating takes less than 5 minute, normally just 2 lines of code :)

SEBASTIEN TONDELIER commented 11th August 23

Hello,

Do you have a process and lines of code ?

Edi commented 7th April 23

Stolen from the LTT channel, we can actually know that Google has a lot of security and privacy issues.

elon commented 3rd October 25

Octordle is an online word puzzle game similar to Wordle, but with a much higher difficulty. In <a href="https://octordlegame.io/">octordle</a>" players not only have to guess one word, but also have to solve eight different words simultaneously on the same screen, with a total limit of 13 guesses. This creates a great challenge and requires players to have good strategies, quick reasoning skills and a rich vocabulary.

Joel Dunham commented 8th March 23

I would pay for a module for this feature but I think it should be included as part of whmcs security features.

pattrawut injan commented 19th February 23

I agree with this post should be added cloudflare

nichoooo commented 1st December 25

It's great to see WHMCS adding hCaptcha. I also heard about a neat AI image upscaler tool..Related Links: https://imageimage.org/ai/ai-image-enhancer

Michael commented 4th February 23

- Google reCaptcha is blocked in China, so if you use that with WHMCS, users from China are forced to use a VPN if they want to do things like login or submit a ticket (if you have captcha enabled on them, which many do on all options). CloudFlare Turnstile captcha service is not blocked in China and won't be as they have their own POPs in China.
- The built in WHMCS internal captcha is easy to bypass and essentially useless against a dedicated spammer/attacker.
- The built in WHMCS internal captcha is only numbers and English letters, an inconvenience for non-English keyboard users to solve.
- CloudFlare Turnstile is easy to complete similarly to Google reCaptcha for non-English users, and won't be blocked in countries that block.

This should only take an hour for an experienced developer to implement as an option, and since WHMCS caters to businesses, including large ones, and is required to have a secure billing platform, I am sure WHMCS has the developers to do this very quickly.

Official Response

WHMCS commented 28th January 25

We have implemented hCaptcha in WHMCS v8.11 and above: https://docs.whmcs.com/system/system-tutorials/enable-hcaptcha/
This provides an alternative solution to those concerned about political and/or privacy issues.

Michael commented 3rd February 23

WHMCS needs to add this and seems like a simple integration.