Recaptcha V3 ERROR

Scriptcase 9 General
#1

Hello,
I created the security module with Recaptcha V3 enabled, but I get an error most of the time when I try to log in: “RECAPTCHA: invalid-input-response”.

Scriptcase version 9.3.021(2) with php 8.2

#2

Hi,

The *RECAPTCHA*: invalid-input-response error in Scriptcase typically means that the Google API is rejecting the verification token sent by your application. When running Scriptcase 9.3 on PHP 8.2, this issue is usually caused by a key mismatch, server-side cURL configuration, or a compatibility bug in that specific Scriptcase release.

Here is how you can fix it:

  1. Verify Google reCAPTCHA Keys: Double-check that the Site Key and Secret Key in your Scriptcase security module were generated specifically for reCAPTCHA v3 in the Google Admin Console. If they were accidentally generated for v2, it will trigger this exact error. Also, ensure your exact domain (or localhost) is added to the allowed domains list.
  2. Switch to reCAPTCHA v2 (Recommended): In early Scriptcase 9.3 builds under PHP 8.2, the background score verification for v3 can be unstable. The quickest and most reliable workaround is to generate new keys for reCAPTCHA v2 (the “I’m not a robot” checkbox) and update your Scriptcase security module configuration. This usually resolves the issue instantly.
  3. Check PHP 8.2 cURL / SSL Certificates: Scriptcase validates the reCAPTCHA response by making a backend request to Google via cURL. If your server lacks updated root certificates (the curl.cainfo path pointing to an updated cacert.pem in your php.ini), the connection to Google will fail silently, causing Scriptcase to throw the invalid response error.
  4. Update Scriptcase: Early minor versions supporting PHP 8.2 contained several bugs regarding external API communication. If your license allows, run a system update to the latest available sub-version to ensure all core libraries are patched.

Locked out of your app? If you cannot log in to fix the settings, access your application’s database, locate the security configuration table generated by Scriptcase, and temporarily disable the reCAPTCHA flag directly in the database row to regain access.

Best regards,