Bot protection
Implementing bot protection safeguards your shop against automated spamming activities, such as inundating contact forms with unwanted and irrelevant messages, ensuring a streamlined and efficient communication process for genuine users.
By deploying bot protection, you can enhance the overall user experience, maintain data integrity, and mitigate the risk of fraudulent or malicious activities that can compromise the security and functionality of your shop.
PlentyONE Shop uses Cloudflare Turnstile to implement bot protection.
Cloudflare Turnstile
Cloudflare Turnstile CAPTCHA serves as an elective functionality, presenting visitors to your website with a CAPTCHA challenge. The challenge safeguards your website against spam and abuse, facilitating smooth interactions for genuine users.
INFO
Opting not to implement this feature will not impede the normal functioning of your website.
How it works
Cloudflare Turnstile is a CAPTCHA widget that automatically challenges visitors. There are three modes configurable in the Cloudflare dashboard:
- Managed: Cloudflare will use information from the visitor to decide if an interactive challenge should be used. If they show an interaction, the user will be prompted to check a box. Users don't have to decipher any images or text.
- Non-interactive: A purely non-interactive challenge. Users will see a widget with a loading bar while the browser challenge is run.
- Invisible : Invisible challenge that does not require interaction.
For further information, refer to the Turnstile documentation.
Enabling Cloudflare Turnstile
This section describes how to enable Turnstile for your shop. You have to take action in Cloudflare, your PlentyONE system and the PlentyONE Shop configuration.
Cloudflare
- Create a Cloudflare account.
- Go to Turnstile » Add site.
- Add your website with your domain(s) and click Create.
Cloudflare generates a secret key and a sitekey. You need both keys in the next steps.
PlentyONE
- Log into your PlentyONE system.
- Go to Setup » plentyShop » Select client » Online Store Settings.
- Paste the secret key in the Cloudflare Turnstile Secret key (only PWA) field.
- Save the settings.
PlentyONE Shop
Paste the sitekey in the PWA's apps/web/.env
file:
CLOUDFLARE_TURNSTILE_SITE_KEY="0x4AAAAAAANx3aXDh7UR35x0"
NEWSLETTER_FORM_SHOW_NAMES=1
NEWSLETTER_FORM_SHOW_NAMES=1
is optional. If set, the newsletter signup form displays input fields for first and last name.
Disabling Cloudflare Turnstile
To disable Turnstile, you have to reset the configurations in the PlentyONE system and PlentyONE Shop.
PlentyONE
- Log into your PlentyONE system.
- Go to Setup » plentyShop » Select client » Online Store Settings.
- Remove the secret key from the Cloudflare Turnstile Secret key (only PWA) field.
- Save the settings.
This disables the CAPTCHA validation.
PlentyONE Shop
Remove the sitekey from the PWA's apps/web/.env
file. This removes the widget in the PWA.
CAPTCHA protected features
- Subscribing to the newsletter