Webmasters on

Installing mCaptcha on your website

Wed, 22 Jun 2022 00:00:00 +0000

mCaptcha can protect your website from DDoS attacks. In this guide we’ll explore how to install mCaptcha on your website. The end result will be something like this, on your website:

For the purpose of this demo, we will be using demo.mcaptcha.org, a demo instance running in @realaravinth’s bedroom(for this same reason, it shouldn’t be used for anything serious)

Configuring Difficulty Factor

Wed, 22 Jun 2022 00:00:00 +0000

mCaptcha is highly responsive to detecting DDoS attacks. Admins are advised to take advantage of it by setting low difficulty factors for normal traffic levels for their website.

Lowest advisable difficulty factor is 5000.

For instance, if it is normal for my website to get 2000 requests for every 30 seconds, I will set a cool down period of 30 seconds and the first level of difficulty configuration will have a visitor threshold of 2000 with a difficulty factor of 5000.

Terminology

Wed, 27 Jul 2022 08:48:45 +0000

Authorization token

When a visitor solves the CAPTCHA and sends their solution to an mCaptcha instance, the solution will be verified for correctness. If the solution is correct, mCaptcha will return a single use authorization token.

This authorization token should be attached to the visitor’s requited to the protected service and the protected service should validity of the authorization token with the mCaptcha instance and only allow authorization to protected resource if the authorization token is valid.

Webmasters FAQ

Wed, 27 Jul 2022 08:48:45 +0000

Easy Mode: Default cooldown period

When configuring mCaptcha in easy mode, the default cooldown period is set to 30 seconds.

How to get site key from dashboard?

Go to “Site keys” on the side panel in the dashboard

click on the clipboard button to copy the site key to your clipboard.