Re: PSR proposal: CAPTCHA (CaptchaInterface and etc.)

['Andreas Heigl' via PHP Framework Interoperability Group]

Hey Ilya, hey List

Am 30.06.25 um 17:08 schrieb LeTraceurSnork:

Good day, everyone!
I would like to propose standardizing a new CaptchaInterface. It's main
purpose, as I see it, is to unify all Captchas external providers into one
simple interface that could be easily used when passed via DI. E.g.:
```php
class SomeFormHandler
{
     function __construct(CaptchaInterface $captcha)
     {
         $this->captcha = $captcha;
     }

     function formSubmit($some_request)
     {
         $captcha_token = $some_request->get('captcha_token');
         $verification = $this->captcha->verify($captcha_token);
         if ($verification->isSuccess()) {
             // captcha passed, do stuff
         } else {
             // captcha failed
         }
     }
}
```

The reason why I'm doing this, in a nutshell - to speed up potential
switches from one vendor to another, avoiding potential vendor-lock and
unifying SDK usage in a future
And while I'm saying "potential", please, don't think I'm paranoid :) We
actually faced this problem recently and now had to switch captcha vendor
from Google ReCaptcha to something else. And sadly enough, that something
else doesn't have its own SDK, so, now unofficial will appear as mushrooms
after a rain - and they better be unified with one another due to the
reasons described above.

Using them is discouraged by several UX and Accessibility groups...

Just my 0.02€

Cheers

Andreas
--
                                                              ,,,
                                                             (o o)
+---------------------------------------------------------ooO-(_)-Ooo-+
| Andreas Heigl                                                       |
| mailto:andr...@heigl.org                  N 50°22'59.5" E 08°23'58" |
| https://andreas.heigl.org                                           |
+---------------------------------------------------------------------+
| https://hei.gl/appointmentwithandreas                               |
+---------------------------------------------------------------------+
| GPG-Key: https://hei.gl/keyandreasheiglorg                          |
+---------------------------------------------------------------------+

--
You received this message because you are subscribed to the Google Groups "PHP 
Framework Interoperability Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to php-fig+unsubscr...@googlegroups.com.
To view this discussion visit 
https://groups.google.com/d/msgid/php-fig/02d7059c-2360-49b3-a474-c8e64106c9d6%40heigl.org.

Do we really want to encourage bad UX? Captchas are a way to distinguish between human and machine. By now all captchas are more easily solved by machines than by humans.

OpenPGP_signature.asc
Description: OpenPGP digital signature