README

Add Google reCaptcha for place order against carding attack

Summary

• Because Carding Attack serious issue, this repo was born.

• Tested against forged place order attack script, follow by the rest url and place order method

  • /V1/guest-carts/:cartId/payment-information
    • Magento\Checkout\Model\GuestPaymentInformationManagement::savePaymentInformationAndPlaceOrder()
  • /V1/carts/mine/payment-information
    • Magento\Checkout\Model\PaymentInformationManagement::savePaymentInformationAndPlaceOrder()

• Support Magento 2.4.1 and upper.

• Wrok for Braintree Credit Card with Google reCaptcha v2 invisible ONLY. No test other cases.

• This module will be replaced by future version of magento/security-package.

Installation

composer require rangerz/magento2-module-re-captcha-checkout
bin/magento module:enable Rangerz_ReCaptchaCheckout
bin/magento setup:upgrade

Usage

Google reCaptcha v2 invisible

• Apply reCaptcha v2 invisible by Google

• Fille website and secret key

• Configuration -> SECURITY -> Google reCAPTCHA Storefront -> reCAPTCHA v2 Invisible

Enable for Place Order

• Configuration -> SECURITY -> Google reCAPTCHA Storefront -> Storefront

License

MIT