Beschrijving
OhmTang CFT is a comprehensive WordPress security plugin that seamlessly integrates Cloudflare Turnstile’s advanced CAPTCHA protection into your website. Say goodbye to traditional annoying CAPTCHAs and embrace a frictionless, privacy-focused security solution that effectively blocks bots while providing a smooth user experience. Completely free Cloudflare Turnstile integration for WordPress and WooCommerce – no premium features, no hidden costs, just powerful spam protection.
π’ DISCLAIMER: Trademarks and brands are the property of their respective owners.
ποΈ Granular Form Control
Individual Form Toggle and Each verification form supports custom error messages, allowing you to personalize the display when users fail the Turnstile challenge.- Complete Flexibility
Take full control over your security implementation with our granular form management system:
- Per-Form Enable/Disable – Every supported form can be individually activated or deactivated
- WordPress Core Forms:
- β Login Form – Toggle on/off
- β Registration Form – Toggle on/off
- β Lost Password Form – Toggle on/off
- β Comment Form – Toggle on/off ( on/off login or no login user)
- WooCommerce Forms:
- β Login Form – Toggle on/off
- β Registration Form – Toggle on/off
- β Lost Password Form – Toggle on/off
- β Checkout Form (Support Full site editting Block Checkout page and Traditional Checkout page) – Toggle on/off ( on/off login or no login user)
π― Smart Conditional Protection
Intelligent Verification Based on User Status
Advanced conditional protection for better user experience:
-
Checkout Page Smart Settings:
- π Option to skip verification for logged-in users – Provide seamless checkout experience for returning customers
- π Always protect guest checkouts – Secure anonymous transactions
- β‘ Reduce friction for trusted customers while maintaining security
-
Comment Form Intelligent Protection:
- π Toggle verification for logged-in users – Choose whether authenticated users need CAPTCHA
- π‘οΈ Always protect guest comments – Prevent spam from anonymous visitors
- π Respect trusted commenters – Regular commentators can enjoy streamlined experience
-
Flexible User-Based Rules:
- πͺ Customize protection based on user roles and status
- π Balance security and usability intelligently
- π Reduce unnecessary verification for trusted users
π‘οΈ Complete WordPress Core Protection
Protect every aspect of your WordPress site with comprehensive form security:
- Login Security – Prevent brute force attacks on wp-login.php and admin areas (toggleable)
- User Registration – Stop spam registrations and fake account creation (toggleable)
- Comment Moderation – Eliminate spam comments automatically with smart user detection
- Password Recovery – Secure lost password forms against abuse (toggleable)
- Contact Forms – Compatible with popular contact form plugins
- Your favorite Contact Forms – If you need to integrate your preferred form, contact me: [email protected]
π Advanced WooCommerce Integration
Secure your online store and protect your revenue with dedicated WooCommerce protection:
- Checkout Security – Prevent fraudulent orders and fake transactions with smart user detection
- Customer Registration – Ensure genuine customer accounts (toggleable)
- Guest Checkout – Protect checkout process for all users with conditional logic
- Login Forms – Secure customer login and authentication (toggleable)
- Review Systems – Block fake product reviews and ratings
βοΈ Advanced Features & Customization
- Smart Theme Options – Light, dark, and auto themes that adapt to your site design
- Flexible Styles – Normal, Flexible and Compact 3 styles where Turnstile appears on each form
- Granular Control – Enable/disable protection for individual forms with one click
- Conditional Logic – Smart rules based on user login status
- Performance Optimized – Minimal impact on page load times
- Mobile Responsive – Perfectly adapted for all devices
- Accessibility Ready – Designed with accessibility in mind
π§ Developer Friendly
- Extensive hooks and filters for customization
- Clean, well-documented codebase
- WordPress coding standards compliant
- Easy integration with custom themes and plugins
- Comprehensive error logging and debugging
π Multi-language Ready
- Full translation support with .pot file
Why Cloudflare Turnstile?
- User-Friendly – No annoying puzzles, image recognition, or text challenges
- Privacy-First – GDPR compliant and privacy-respecting
- Free Forever – Cloudflare’s free tier provides robust protection
- Advanced Detection – Machine learning and behavioral analysis
- Fast Implementation – Simple setup with Site Key and Secret Key
Experience the perfect balance of security and usability! With individual form controls and smart conditional protection, you can secure your site without frustrating your legitimate users.
Schermafbeeldingen

WordPress login form enable OhmTang CFT 
woocommerce my account page login form and register form 
Woocommerce Full site editting Block Checkout page enable OhmTang CFT 
Woocommerce Traditional Checkout page enable OhmTang CFT 
Wordpress Comment Form enable OhmTang CFT 
OhmTang CFT site key and secret key setting page 
Woocommerce and WordPress Form Configuration 
Woocommerce Review Form enable OhmTang CFT 
WordPress lostpassword form enable OhmTang CFT 
WordPress register form enable OhmTang CFT 
Woocommerce lostpassword form enable OhmTang CFT
Installatie
Automatic Installation
- Go to Plugins > Add New in your WordPress admin
- Search for “OhmTang CFT”
- Click “Install Now” and then “Activate”
- Go to OhmTang CFT settings page
- Configure your Cloudflare Turnstile keys
Manual Installation
- Upload the
ohmtang-cftfolder to the/wp-content/plugins/directory - Activate the plugin through the ‘Plugins’ menu in WordPress
- Go to OhmTang CFT settings page
- Configure your Cloudflare Turnstile keys
Configuration
- Get your free Site Key and Secret Key from Cloudflare Turnstile
- Go to WordPress Admin > OhmTang CFT
- Enter your Site Key and Secret Key in the API Settings section
- Navigate to Forms Settings tab to individually enable/disable each form
- Configure smart settings for checkout and comments (logged-in user options)
- Choose your preferred theme and appearance settings
- Save settings and test your protected forms
FAQ
-
Can I enable Turnstile only for specific forms?
-
Yes! Every form has its own toggle switch. You can enable protection for login forms but disable it for comments, or any combination you prefer.
-
How does the logged-in user protection work for checkout?
-
You can choose whether logged-in users need to complete verification during checkout. This allows returning customers to enjoy faster checkout while still protecting guest transactions.
-
Can I disable verification for trusted commenters?
-
Absolutely! The comment form has an option to skip verification for logged-in users, so your regular visitors aren’t bothered with CAPTCHA.
-
What if I only want to protect WooCommerce but not WordPress forms?
-
You have complete control! Simply enable the WooCommerce forms you want to protect and disable the WordPress core forms in the settings.
-
Is there a way to see which forms are currently protected?
-
Yes, the admin dashboard provides a clear overview of all enabled forms with quick toggle switches.
-
Does this plugin use any external services?
-
Yes, this plugin integrates with Cloudflare Turnstile, a free CAPTCHA alternative service provided by Cloudflare, Inc. Turnstile helps verify human users on forms (e.g., login, comments, WooCommerce checkout) without intrusive puzzles, improving security while minimizing user friction.
Turnstile is embedded via JavaScript widget and communicates with Cloudflare’s servers (challenges.cloudflare.com) for bot detection.
-
What data is sent to Cloudflare and when?
-
To provide bot detection, Turnstile collects and sends limited client-side signals (“Signals”) to Cloudflare only when necessary:
-
Data collected: Client IP address, TLS fingerprint, User-Agent header, sitekey (your site’s verification key), and origin domain. Additional non-interactive signals include proof-of-work/space, browser API probes, and behavior quirks (no cookies, login data, or personal identifiers are collected).
-
When sent:
- On widget load: Initial signals to assess the browser environment.
- On form submission: Verification token and response signals for siteverify check.
These signals are used solely for real-time bot blocking and algorithm improvement. Cloudflare acts as a data processor (you are the controller). No data is used for advertising or retargeting. Retention is minimal, aligned with security needs.
For EU/GDPR users: Data may be processed in the US under standard contractual clauses.
-
-
Privacy and Terms
-
For full details:
– Turnstile Privacy Addendum: https://www.cloudflare.com/trust-hub/gdpr/turnstile-privacy-addendum/
– Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/
– Cloudflare Website Terms: https://www.cloudflare.com/website-terms/
– Cloudflare Data Processing Addendum (GDPR): https://www.cloudflare.com/trust-hub/gdpr/This plugin does not store or send additional data beyond what’s required for Turnstile integration. If you have privacy concerns, review Cloudflare’s policies or contact us.
Beoordelingen
Er zijn geen beoordelingen voor deze plugin.
Bijdragers & ontwikkelaars
“OhmTang CFT” is open source software. De volgende personen hebben bijgedragen aan deze plugin.
BijdragersVertaal “OhmTang CFT” in je eigen taal.
Interesse in ontwikkeling?
Bekijk de code, haal de SVN repository op, of abonneer je op het ontwikkellog via RSS.
Changelog
1.0.0
- Initial release with comprehensive form protection
- Individual enable/disable toggle for every supported form
- Smart conditional protection for checkout pages (logged-in user options)
- Intelligent comment form settings (logged-in user verification toggle)
- Complete WordPress core forms integration
- Full WooCommerce compatibility
- Advanced admin dashboard with granular controls
- Multi-language support
- Developer-friendly hooks and filters
