if we turn off the domain or package name checking on reCAPTCHA's end, we need to check it on our server. You can find this here - https://developers.google.com/recaptcha/docs/domain_validation. Response of post request on /recaptcha/api/siteverify have a needed parameter for this checking, called -
"hostname".
if we turn off the domain or package name checking on reCAPTCHA's end, we need to check it on our server. You can find this here - https://developers.google.com/recaptcha/docs/domain_validation. Response of post request on /recaptcha/api/siteverify have a needed parameter for this checking, called - "hostname".