{"id":7617,"date":"2016-01-22T18:10:35","date_gmt":"2016-01-22T18:10:35","guid":{"rendered":"https:\/\/dev.railscarma.com\/protect-your-web-application-with-google-recaptcha-on-ruby-on-rails\/"},"modified":"2021-06-06T12:57:36","modified_gmt":"2021-06-06T12:57:36","slug":"protect-your-web-application-with-google-recaptcha-on-ruby-on-rails","status":"publish","type":"post","link":"https:\/\/www.railscarma.com\/it\/blog\/articoli-tecnici\/protect-your-web-application-with-google-recaptcha-on-ruby-on-rails\/","title":{"rendered":"Protect Your Web Application with Google reCaptcha on Ruby on Rails"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\u2018Spam\u2019 could be one of the most dreadful word for a web application owner. Especially for an application with a lot of user generated content, it could be a nightmare to cope with. To keep the spammers at bay, a free service by Google called as reCaptcha could be used. A service to protect the website from spam and abuse and freeing your users to attest without having to solve a captcha, Google reCaptcha protect the application from a denial of service attack by preventing automating form submissions.\n\nA better solution to the existing image captchas, Google reCaptcha is easy to use and comes packed with advanced security features. Using an advanced risk analysis engine, reCaptcha keeps the automated bots from engaging in spamming activities for your application. Besides it is much more user friendly than the earlier image captchas.\n\nBefore you can add in Google reCaptcha to your application, you need to follow these steps:\n\n1) Get the credentials\n2) Add recaptcha tags\n3) To handle verification, create a recaptcha class\n4) In Registrations controller add verify_recaptcha method\n\nImpostare<\/strong>\n\nStep 1:-<\/strong>\n\nAdd the following to your gem file:\n\ngem “recaptcha”, :require => “recaptcha\/rails”\n\nStep 2:-<\/strong>\n\nLogin to http:\/\/developers.google.com and sign into your gmail account and search for \u2018recaptcha\u2019. Click on \u201cSignup for an API Key<\/strong>\u201d link. Check the secret and site keys. As the name itself suggests, the secret key should be kept at a safer location whereas the site key is the public key used for authenticating to Google. Register your site name with your google account to retrieve public and private key that will be used later on the application.\n\nAfter the registration is done, you will get the public key and private key. From the client side, the public key is sent to recaptcha service to request a new captcha. The private key is applied on the server side to verify if the right value is entered.\n\nThen register for a reCAPTCHA API key and add that to your environment config files:\n\n#put this in development.rb and in production.rb\n\nENV_RECAPTCHA_PUBLIC_KEY<\/strong>= ‘your-public-key’\n\nENV_RECAPTCHA_PRIVATE_KEY<\/strong>= ‘your-private-key’\n\nStep 3:-<\/strong>\n\nCreate a file named recaptcha.rb in config\/initializers to configure recaptcha parameters.\n\nRecaptcha.configure do |config|\nconfig.public_key = ‘ ENV_RECAPTCHA_PUBLIC_KEY’\nconfig.private_key = ‘ENV_RECAPTCHA_PRIVATE_KEY’\nconfig.proxy = ‘http:\/\/www.google.com\/recaptcha\/api\/verify’\nend\n\nStep 4:-<\/strong>\n\nView<\/strong>\n\nThe Captcha Gem helps to render the actual captcha box. It’s as simple as putting the following into your view at the point where you want the captcha to appear:\n\n<%= raw recaptcha_tags %>\n\nIf you are using SSL, use this instead:\n\n<%= recaptcha_tags :ssl => true %>, The SSL option ensures we send a https request to the recaptcha service.\n\nStep 5:-<\/strong>\n\nController<\/strong>\n
The Captcha Gem provides another helper method that posts to the reCaptcha API server to verify if the submission is correct. If it is then the method returns true, if not, it will add a custom error message that the recaptcha is wrong to the model instance. Here is the basic code as you might have it in the create action of your controller:-\nIn devise controllers, app\/controllers\/registrations_controller.rb, Insert the following code:\nrequire ‘recaptcha.rb’\nbefore_action :verify_recaptcha, only: [:create]\ndef verify_recaptcha\nresponse = Recaptcha.verify(params)\nsession[:sign_up] = params[:user].except(:password, :password_confirmation, :remoteip)\nif response.code == 200\nif response[‘success’]\nflash[:notice] = “Recaptcha verification successful.”\nelse\nredirect_to new_user_registration_path(user: params[:user]),\nalert: “Recaptcha verification error.”\nend\nelse\nredirect_to new_user_registration_path(user: params[:user]),\nalert: “HTTP connection error.”\nend\nend<\/blockquote>\nThe session[:sign_up] is persisted as the signup form can be pre-filled if verification fails.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Iscriviti per gli ultimi aggiornamenti<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\t\t\t\t\t