• Welcome to the Chevereto user community!

    Here users from all over the world gather around to learn the latest about Chevereto and contribute with ideas to improve the software.

    Please keep in mind:

    • 😌 This community is user driven. Be polite with other users.
    • 👉 Is required to purchase a Chevereto license to participate in this community (doesn't apply to Pre-sales).
    • 💸 Purchase a Pro Subscription to get access to active software support and faster ticket response times.

Replace the Recaptcha API domain

Mashiro

Chevereto Member
For the political reason, https://www.google.com is not accessible in Mainland China. Now, as you can imagine, the Recaptcha API (https://www.google.com/recaptcha) is not accessible for Chinese visitors.

But it was not all Google's services been blocked in China, eg. https://www.google.cn and https://developers.google.cn is accessible here, and Google has been keeping two data centers in Mainland China, so, fortunately, Recaptcha API is accessible in China through another domain: www.recaptcha.net. That means https://www.recaptcha.net/recaptcha is equal to https://www.google.com/recaptcha.

You may check www.recaptcha.net 's SSL certification, it was signed with Google's Root CA (it means www.recaptcha.net was officially hosted by Google, although it is not mentioned in Recaptcha's documentation):
1588748459490.png

I tried to replace the domain in app/lib/functions.php , app/lib/chevereto.js, and app/lib/chevereto.min.js the Recaptcha's front-end service works well.

I think the Recaptcha certificate is important for a Chevereto host to keep away from attack/abuse, every Chevereto host in every corner of the world should be accessible to it.

My hope is Chevereto could add an option to select from which host (www.google.com or www.recaptcha.net) to import Recaptcha services. Currently, my modification could be erased by the next updating, and I don't want to modify it manually every time.
 
PS. I just modified the Recaptcha host in front-end (for visitor), but the back-end API host should also be considered if the Chevereto host server is also in Mainland China.
 
Back
Top