Add CAPTCHA to an Advanced Sign Up Form
To enhance the security of your Advanced Sign Up form, you can add a CAPTCHA challenge using a third-party CAPTCHA provider, either hCaptcha or Google reCAPTCHA v2.
CAPTCHA challenges prompt customers to complete simple tasks to verify they are human before submitting the sign up form. This adds an extra layer of protection against automated abuse and fraudulent activity and helps prevent bot attacks from creating spam submissions.
CAPTCHA for an Advanced Sign Up form is different than SuiteCommerce CAPTCHA. For more information about setting up CAPTCHA for your SuiteCommerce web store, see SuiteCommerce CAPTCHA.
To set up CAPTCHA for an Advanced Sign Up form:
-
Sign up with the provider of your choice and get a Site Key
Provider choices:
-
Create a secret key in NetSuite using API secrets
For more information, see Creating Secrets.
In the Restrictions tab:
-
Check the box for Allow for All Scripts
-
For Restrict to Domains, add the corresponding CAPTCHA validation domain:
-
For hCaptcha: api.hcaptcha.com
-
For Google reCaptcha v2: www.google.com
Note that with this domain restriction, the secret key is only exposed when communicating with the designated CAPTCHA validation service.
-
-
Configure CAPTCHA in NetSuite
To set up CAPTCHA for the Advanced Sign Up form, configure the fields on the SuiteCommerce Configuration record.
CAPTCHA configuration is domain-specific. You can disable CAPTCHAs that are no longer needed.
To configure CAPTCHA
It may take a little time for the changes to take effect. To see the changes sooner, trigger a Cache Invalidation Request.
-
Go to Commerce > Websites > Configuration.
-
Select the website and domain where the Advanced Sign Up extension is activated and click Configure.
-
Go to the Extensions tab and the Advanced Sign Up subtab.
-
Set the following fields:
Field
Description
CAPTCHA Type Option
Choose your CAPTCHA provider. You can choose between Google reCAPTCHA v2 and hCaptcha.
To disable this CAPTCHA challenge, select Disabled.
CAPTCHA Site Key
Enter the public key provided by your CAPTCHA provider (reCAPTCHA or hCaptcha).
CAPTCHA Secret Key ID
Enter the private key's ID.
For more information about how to create a secret key using API secrets, see Creating Secrets.
-
Click Save.