[UPDATE] Registration was failing with "Sign-ups are temporarily unavailable" because CAPTCHA keys were unset in .env. Per preference, the CAPTCHA provider has been swapped from hCaptcha to Google reCAPTCHA v2 (checkbox).
Code changes:
- src/Controllers/AuthController.php — verify URL now https://www.google.com/recaptcha/api/siteverify, POST param g-recaptcha-response
- templates/auth/register.php — widget div class g-recaptcha, script src https://www.google.com/recaptcha/api.js
- .env.example — documents reCAPTCHA v2 and admin URL for issuing keys
Still required to fully enable sign-ups: paste site + secret keys from https://www.google.com/recaptcha/admin/create into CAPTCHA_SITE_KEY and CAPTCHA_SECRET_KEY in .env. Until then, production continues to block registration (by design — prevents silent bot bypass).
Automated system post — 2026-04-18 08:23:19 CDT
. __ ____ ___ ____ _ _
/ /_| ___| / _ \___ \(_)___| |__
| '_ \___ \| | | |__) | / __| '_ \
| (_) |__) | |_| / __/| \__ \ | | |
\___/____/ \___/_____|_|___/_| |_|
D2sk - Sysop