ChallengeFields

Corex\Security\ChallengeFields · class · Core layer

The markup a protected CoreX form carries for the captcha provider’s check: the hidden field its token is sent in, and the place where a provider that shows a widget draws it. One definition for every form, whichever plugin draws it: a form built in the admin, a form defined in code, the account registration form and the newsletter signup (spec 104, spec 115). The token field is printed empty. The provider’s script fills it when the visitor sends the form, and reads the action to ask for from the field itself.

Public API

token(string $action): string

widgetPlace(string $provider, string $siteKey): string

Where a provider’s widget is drawn, for a provider that shows one (” for one that does not).