Reference
ButtonCaptcha form integration
Add silent form verification and validate the response on your server before accepting a protected submission.
On this page
Prepare the integration
Install the Button script and obtain the verification endpoint and site credentials assigned to your integration. The verification endpoint is deployment-specific; confirm it before implementing the server request.
Add the form element
Include the generated response with the form submission to your own backend. A missing response must be handled explicitly; do not accept a submission just because the widget element exists.
<form>
<!-- Your existing fields -->
<div class="button-solutions-captcha"></div>
</form>Verify on your server
- Receive the generated response with the form data on your backend.
- Send the response and assigned site credentials to the verification endpoint specified for your integration.
- Check the verification result and required origin and timestamp conditions before accepting the protected action.
- Handle missing, failed and expired responses as well as unavailable verification. Confirm retry and replay behavior for your integration before shipping.
Keep in mind: A frontend check is not a substitute for server verification. Keep server credentials out of browser code and request the current endpoint contract rather than copying a placeholder URL.
Validate the form
Test a valid submission, a missing response, an invalid response and a verification failure. Check behavior under your consent setup and content security policy, including on mobile.