Differences

This shows you the differences between two versions of the page.

--- litespeed_wiki:config:recaptcha [2019/03/04 19:55]
Kevin Fwu [Customizing the Recaptcha Page]
+++ litespeed_wiki:config:recaptcha [2019/04/01 18:54]
Jackson Zhang
@@ Line 12: / Line 12: @@
-Set **Enable reCAPTCHA** to ''Yes''. This is the master switch.
+Set **Enable reCAPTCHA** to ''Yes''. This is the master switch and it is required for both control panel environment and LSWS native environment.
 For other options, hover over the ''?'' symbol to view detailed information about that option.
@@ Line 28: / Line 28: @@
 You can also enable reCAPTCHA on an individual virtual host that is under attack, while leaving other websites disabled.
-===== How To Enable at the Vhost Level =====
+===== How To Enable at the Vhost Level for control panel virtual hosts or LSWS native virtual hosts=====
-Server-level reCAPTCHA must be enabled.
+Server-level reCAPTCHA must be enabled even control panel used.
-Please note that virtual-host-level sensitivity will override the sensitivity set at the server level.
+LSWS native virtual-host-level sensitivity will override the sensitivity set at the server level.
-You can enable virtual-host-level reCAPTCHA through rewrite rules or the WebAdmin console.
+You can enable virtual-host-level reCAPTCHA through rewrite rules for control panel virtual hosts or through the WebAdmin console for LSWS native virtual hosts.
-==== Rewrite Rule ====
+==== Enable recaptcha for control panel virtual hosts through rewrite rules ====
-Use one of the following rewrite rule directives:
+Use one of the following rewrite rule directives in control panel virtual host document root .htaccess:
-''[E=verifycaptcha]'' or ''[E=verifycaptcha: deny]''
+''[E=verifycaptcha]'' or ''[E=verifycaptcha: ACTION]''
-''[E=verifycaptcha]'' will always redirect to reCAPTCHA until verified. ''[E=verifycaptcha: deny]'' will redirect to reCAPTCHA until **Max Tries** is reached, after which the client will be denied.
+''[E=verifycaptcha]'' will always redirect to reCAPTCHA until verified. ''ACTION'' can be ''deny'' to return a 403 or ''drop'' to drop the connection when **Max Tries** is reached. Until Max Tries is reached, the client will be redirected to recaptcha.
 For example:
@@ Line 52: / Line 52: @@
 (''SOME-CONDITIONAL-CHECK'' would be a suspicious UA, IP address, etc.)
-==== LiteSpeed Native Mode ====
+==== Enable recaptcha for LiteSpeed native virtual hosts ====
 You can also use LSWS WebAdmin console to enable reCAPTCHA in LSWS native mode.
@@ Line 81: / Line 81: @@
 Beyond those required attributes, everything else is customizable. As noted before, please ensure that you have backups of the default page and your customized page. Note that the ''.shtml'' extension is required in order to use the LSWS configured type and keys.
+===== Apply your own site key =====
+You can apply your own recaptcha key and adjust the configuration to what you like. How to verify the client is completely determined by google recaptcha service. The invisible type may choose to display a difficult a puzzle.
+For server wide protection that needs to cover a lot of domains, make sure ''Verify the origin of reCAPTCHA'' solutions is unchecked. Otherwise, you may need to apply key for each domain.
+===== What "Trigger Sensitivity" means? =====
+Automatic reCAPTCHA sensitivity. The higher the value, the more likely reCaptcha Protection will be used. A value of 0 is equivalent to "Off" while a value of 100 is equivalent to "Always On". Default values: Server level: 0. Virtual Host level: Inherit Server level setting. Syntax: Integer value between 0 and 100.
+How "Trigger Sensitivity" is caculated by LiteSpeed? It is the percentage of your server capacity used based on a number of active connections. When "in use connection" * 100 / max connections" > (100 - sensitivity), it will be turned on.