Migrate "execute" until just before form submit

[ecaron]

The current implementation of grecaptcha.execute causes 2 problems:

• Since reCAPTCHA tokens expire after two minutes (per https://developers.google.com/recaptcha/docs/v3), but execute happens on page load, if the user takes more than 2 minutes to complete their form then the token expires
• If the form is reset, cf-recapv-token is injected into the form multiple times.

If we could adjust this plugin to block the caldera form submission, then execute the grecaptcha, then let the submission continue, the problem should go away.

The code in question is at https://github.com/andrewlimaza/caldera-forms-anti-spam/blob/a43164965aab9e30bc08f8e4f77cbd6ed84ab63a/fields/recaptcha/field.php#L58

[ecaron]

I'm working on a PR. My current idea involves https://calderaforms.com/doc/validation-events/ and modifying the state of obj.inst.validationResult to "wrap" the call.

[ecaron]

Here's a gist that represents what I have in mind: https://gist.github.com/ecaron/da9087482b0cdfa587f762a608bb43cf Notable changes:

• Removes the reset_ code, since that's abandoned from Caldera main
• Only tested against Captcha v3
• Sends the form's name (already in DOM) to reCaptcha as the action
• Essentially disables the form, then executes, then resubmits the form

[ecaron]

The gist has been updated (https://gist.github.com/ecaron/da9087482b0cdfa587f762a608bb43cf):

• Passes WordPress CodeSniffer
• Causes fewer issues where the page was treating a v3 captcha like a v2

[ecaron]

PR has been submitted: https://github.com/andrewlimaza/caldera-forms-anti-spam/pull/21

[sburlot]

PR #21 solved the "reset captcha" for me. Hope this goes to the next update.

[ecaron]

@andrewlimaza - any update on this?