search

google / recaptcha

PHP client library for reCAPTCHA, a free service to protect your website from spam and abuse.
http://www.google.com/recaptcha/
BSD 3-Clause "New" or "Revised" License
3.48k stars 774 forks source link

incorrect-captcha-sol errors for Recaptcha v3 #464

Closed mereh74 closed 3 years ago

mereh74 commented 3 years ago

I'm seeing a few of these "incorrect-captcha-sol" errors returned from Google Recaptcha v3 in my application. I'm confused as to what could be causing this, since v3 doesn't present the user with a captcha to solve. I'm using a React front end and generating the token with the Recaptcha library that I am loading with https://www.google.com/recaptcha/api.js?render=${siteId}. The server side is using Google Recaptcha v3 to verify the token.

twocs commented 3 years ago

Yes, we are seeing this as well. Not really a pattern to it, just once every few days there's an "incorrect-captcha-sol" entry. No information on Google Developers recaptcha list of error codes:

https://developers.google.com/recaptcha/docs/verify

Error code Description
missing-input-secret The secret parameter is missing.
invalid-input-secret The secret parameter is invalid or malformed.
missing-input-response The response parameter is missing.
invalid-input-response The response parameter is invalid or malformed.
bad-request The request is invalid or malformed.
timeout-or-duplicate The response is no longer valid: either is too old or has been used previously.

However, it seems that the issue is with Google's recaptcha service and api.js, not this PHP library.

mereh74 commented 3 years ago

Yes, we are seeing this as well. Not really a pattern to it, just once every few days there's an "incorrect-captcha-sol" entry. No information on Google Developers recaptcha list of error codes:

https://developers.google.com/recaptcha/docs/verify

Error code Description
missing-input-secret The secret parameter is missing.
invalid-input-secret The secret parameter is invalid or malformed.
missing-input-response The response parameter is missing.
invalid-input-response The response parameter is invalid or malformed.
bad-request The request is invalid or malformed.
timeout-or-duplicate The response is no longer valid: either is too old or has been used previously.

However, it seems that the issue is with Google's recaptcha service and api.js, not this PHP library.

Ooof, yes you are right. This is specific to Google recaptcha, not this library. I'll open an issue in their support forum.

zhibek commented 2 years ago

Hi @mereh74 & @twocs. Did either of you find a solution to this issue?

@mereh74 If no resolution, do you have a link to the issue you opened on the support forum?

To confirm, I'm experiencing the same problem. Some incorrect-captcha-sol errors are coming through in our logs unexpectedly when we're using Recaptcha v3.

Thanks!

devendrabhandari commented 2 years ago

Hello @zhibek I am experiencing the same issue; around 4% of daily leads have been rejected by reCaptcha due of cause of incorrect-captcha-sol error. Did you find any solution?

maddsua commented 1 year ago

Hi everyone! Still no updates?

twocs commented 1 year ago

Hi everyone! Still no updates?

The issue is closed because incorrect-captcha-sol is an undocumented response from the Google API. In my experience, it means there is some error, whether it's a problem at Google or a problem between your API and Google, if you want to find out more you're going to have to contact Google. SOL means S**T-OUT_OF-LUCK. If you have an issue with incorrect-captcha-sol, I suggest that you will need to consult stack overflow or another forum. FYI, the status is not unique to recaptcha v3, has been around since 2013 and has not been documented in more than a decade, so barring a miracle, Google will keep it opaque.

Handy links regarding this status:

maddsua commented 1 year ago

Hi everyone! Still no updates?

The issue is closed because incorrect-captcha-sol is an undocumented response from the Google API. In my experience, it means there is some error, whether it's a problem at Google or a problem between your API and Google, if you want to find out more you're going to have to contact Google. SOL means S**T-OUT_OF-LUCK. If you have an issue with incorrect-captcha-sol, I suggest that you will need to consult stack overflow or another forum. FYI, the status is not unique to recaptcha v3, has been around since 2013 and has not been documented in more than a decade, so barring a miracle, Google will keep it opaque.

Handy links regarding this status:

* https://code.google.com/archive/p/recaptcha/wikis/FAQ.wiki#I_keep_getting_%22incorrect-captcha-sol%22_even_though_I&%23

* https://stackoverflow.com/questions/1264703/google-recaptcha-keep-getting-incorrect-captcha-sol

* [Error "incorrect-captcha-sol" and "timeout-or-duplicate" AurityLab/vue-recaptcha-v3#535](https://github.com/AurityLab/vue-recaptcha-v3/issues/535)

* https://www.google.com/search?q=%22incorrect-captcha-sol%22

It looks like a problem on Google's side. I keep randomly getting this response, usually after a period of inactivity.

There was no need to google it for me - nobody seems to find a solution, in every case I read all comes down to php f****ry or other language or frame work specific...things.

It makes me think about switching back to v2 invisible. [sighs], I actually like v3's client-side code much more