CiviCRM Community Forums (archive)

Hi,

I am using the form at "civicrm/contribute/transact?reset=1&id=1" for Drupal User Registration and CiviCRM Member Registration in one go. Under profile settings I have recaptcha and force Drupal user account registration options activated.

As I would expect, if I set Drupal so that only the administrator can create Drupal user accounts then while the CiviCRM form does go through just fine, the Drupal account is not set up at the same time.

So I set Drupal so that anyone can create a Drupal user account and then turn on Drupals captcha module for User Registration (in addition to CiviCRM recaptcha) then the CiviCRM form goes through just fine but again the Drupal user account is not created but this time I get a captcha validation error. It would appear that Drupal is looking for captcha validation of the Drupal captcha when CiviCRM tries to create the Drupal user account.

(I am using image captcha with Drupal and recaptcha with CiviCRM so I can tell were the validation error is coming from)

If I turn off Drupals captcha module for User Registration then the CiviCRM form works just fine, but then I have no way of stopping bots creating Drupal user accounts via Drupals User Registration and I would rather not just rely on email validation.

Can someone provide any tips on putting some form of captcha on both User Registration via Drupal and via the CiviCRM form?

Thank you.

Thanks for getting back to me. These are the settings I used...

CiviCRM Profile 1 – Simple, required for all users of the site
   Settings:
      Profile - checked
      User Registration – checked
      View/Edit User Account – checked
      Search - not checked
      CiviContribute – checked
   Advanced Settings:
      Include reCAPTCHA? – checked
      Account creation required – checked

CiviCRM Profile 2 – Membership specific
   Settings:
      Profile - checked
      User Registration – not checked
      View/Edit User Account – checked
      Search - not checked
      CiviContribute – checked
   Advanced Settings:
      Include reCAPTCHA? – not checked
      Account creation required – not checked

Include Profile 1 and Profile 2 in the CiviCRM membership form

Drupal Settings:
   Captcha for User Registration - none
   Visitors can create accounts and no administrator approval is required - checked
   Require e-mail verification when a visitor creates an account - checked

...then Drupal will use the CiviCRM reCAPTCHA from Profile 1 at "/user/register" as well as CiviCRM using it at "/civicrm/contribute/transact?reset=1&id=1"

I gave it a go, but no captcha was displayed at /user/register. Did I miss something? Do I need to uninstall Drupal captcha module?

Oh nevermind, I am tired

Lily

I would be interested in any updates on this as well. I had to disable the Drupal Captcha (via reCaptcha) implementation for user registrations as the reCaptcha form is not exposed on the CiviCRM sign up page and it was causing new member sign ups to fail with the error:

CAPTCHA validation error: unknown CAPTCHA session ID.

The fix is to disable the Captcha requirement for Drupal registrations, but as soon as I did that I started getting spam account registrations again. Enabling reCaptcha in the CiviCRM profile does not fix it as it does not create the same session ID as the Drupal reCaptcha and therefore does not validate.

It seems the spammers are getting smarter and are doing email confirmations as well, so the reCaptcha process is becoming more critical to preventing them from getting in.

That's the approach I'm thinking I will take as well. Still, it would be nice if the Drupal Captcha pieces were exposed in CiviCRM. Not a huge deal, but would make for a cleaner integration.