Google reCaptcha Enterprise Plugin

Google reCaptcha Enterprise Plugin protects your Osclass classifieds site with Google reCaptcha Enterprise Services - Google's current top-tier bot protection platform. It is the natural upgrade for sites that already use classic reCaptcha v3, Invisible reCaptcha or older Google checkbox plugins, but need stronger risk analysis, clearer reporting and a future-proof integration path.

Protection is score-based and invisible. Real visitors complete your forms without solving image puzzles. Each submission is analysed in the background and verified on the server through the Enterprise Assessment API. You control how strict protection should be using an customizable score threshold, while a built-in verification log shows what passed, what failed and what was reason.

reCaptcha Enterprise uses a Google Cloud project. You create a Website >  Score key (v3), a Project ID and an API key. Google provides a monthly free assessment allowance on Enterprise; typical classifieds sites stay within it.

This plugin works with latest Google reCaptcha API (newer then v3 - enterprise).

Why Enterprise Instead of Legacy reCaptcha?

• Premier platform - Google positions reCaptcha Enterprise as the current production standard, with ongoing investment and API improvements
• Risk scores - every assessment returns a score from 0.0 (likely bot) to 1.0 (likely human), not just pass/fail - all is logged in backoffice
• Better visibility - verification log stores score, action name, hostname and error details per attempt
• Action-based protection - separate Google actions per form (register, contact, login, etc.) for more accurate analytics in Google Cloud
• Smooth migration - same invisible front-end experience users expect from reCaptcha v3, with Enterprise-grade server verification

Spam Protection for All Important Osclass Forms

reCaptcha can be enabled separately for each form in Osclass:

• Registration form
• Login form
• New comment form
• Item contact form
• Send to a friend form
• Web contact form (contact page)
• New item form (publish listing)

Standard Osclass hooks are used, so themes that follow Osclass conventions work without modifications. Custom theme forms can be protected through hook pairs or a single manual display hook described below.

Front-End Features

• Invisible score-based check - no checkbox challenge for normal visitors
• Small Google badge (bottom right, bottom left or inline inside the form)
• Compatible with sigma and other themes that use jQuery Validate on contact and login forms
• Option to hide reCaptcha for logged-in web users (admins can still test while logged into backoffice)
• Optional global script loading when no protected form is present on the page

Scoring and Policy Details

• Adjustable score threshold (default 0.5) — raise it to be stricter, lower it to reduce false positives
• Per-form Google action names for clearer reporting in Google Cloud and in the plugin log
• Server-side assessment through reCaptcha Enterprise API (not legacy secret-key siteverify)

Verification Log with Chart

Every assessment is stored in a database log so you can audit protection on your live site:

• Form name, result (success/failure) and error codes
• Risk score and Google action returned by Enterprise
• Visitor IP address and hostname
• Date and time of each verification
• Search, filters and pagination in the backoffice
• Bar chart with successful and failed verifications for the last 30 days

Old records are removed automatically by daily cron. Retention period is configurable in months.

Custom Forms Support

Forms added by themes or other plugins can be protected as well. In plugin settings you define hook pairs - a display hook that outputs the marker and a verify hook that checks the submission. To place protection manually in a template, use:

<?php osc_run_hook('googlev3_recaptcha'); ?>

and verify the submission in your processing code with:

gvr_verify_form('my_form_name', 'my_google_action');

Backoffice Features

• Settings page with Site Key, Project ID, API Key, score threshold and badge position
• Separate switch for each Osclass form plus custom hook rows
• Built-in test panel - run a live Enterprise assessment from the backoffice and inspect score, action and API response
• Step-by-step setup guide for Google Cloud Console (API enablement, Score key creation, API key restrictions)
• Debug mode - marker is highlighted and admin sees a diagnostic message on each front-end form
• Verification log with search, pagination and 30-day chart

Easy Setup

1. Create or select a Google Cloud project and enable reCaptcha Enterprise API
2. Create a Website > Score based (v3) key in Google Cloud > Security > reCaptcha
3. Create a Google Cloud API key restricted to reCaptcha Enterprise API
4. Copy Site Key, Project ID and API Key into plugin settings
5. Disable built-in Osclass reCaptcha to avoid conflicts
6. Set score threshold, choose badge position, enable forms and save
7. Run the backoffice test panel, then submit a real form and check Verification Log

Upgrade Path from Older reCaptcha Plugins

If you already run an Invisible reCaptcha, classic reCaptcha v3 or checkbox plugin on Osclass, this plugin keeps the same practical workflow: hook-based form integration, invisible user experience and per-form toggles. The difference is Enterprise server verification, risk scores in your log and alignment with Google's current platform. Legacy secret keys from old reCaptcha admin pages are not used — you configure Enterprise credentials from Google Cloud instead.

Summary

Google reCaptcha Enterprise Plugin is a perfect spam protection for Osclass classifieds. It brings Google top-notch score-based reCaptcha to registration, contact and listing workflows, gives admins full visibility through scored verification logs, and upgrades older reCaptcha integrations without theme modifications on standard Osclass themes.