How to Use Security and Integration Settings
The Security & Integration settings help protect your RepairPlugin front-end forms from spam, bots, and malicious requests. These options allow you to enable CSRF protection and integrate Google reCAPTCHA for an extra layer of security during the booking process.
These settings are strongly recommended for live websites.
Where to Find Security & Integration Settings
To access these options:
Go to RepairPlugin → Settings
Open Front-End Steps
Scroll to the Security & Integration section
Available Security & Integration Options
Enable CSRF Protection
CSRF (Cross-Site Request Forgery) protection prevents unauthorized or forged form submissions.
When enabled:
All front-end RepairPlugin forms are protected
Only valid user sessions can submit data
Security is improved without affecting the customer experience
Recommended: Keep this enabled on all production websites.
To enable:
Toggle Enable CSRF Protection to ON
Save your settings
Google reCAPTCHA
Google reCAPTCHA adds an additional security layer by detecting and blocking spam or automated bot submissions.
This helps protect your booking forms from abuse while allowing real customers to proceed normally.
To configure reCAPTCHA, click the Google reCAPTCHA button, then add your website URL & domain name then it generates a key for you.
Setting Up Google reCAPTCHA (v3)
When you click Google reCAPTCHA, a setup modal opens where you can connect your Google reCAPTCHA v3 keys to RepairPlugin.
Required reCAPTCHA Keys
You will need two keys from Google reCAPTCHA:
Site Key
Secret Key
These keys are generated in the Google reCAPTCHA admin console.
How to Add Your reCAPTCHA Keys
Click Google reCAPTCHA in the Security & Integration section
In the popup modal, enter:
Your Site Key
Your Secret Key
Toggle Enable Protection to ON
(Optional) Enable Hide reCAPTCHA Badge
Click Save Changes
Once saved, reCAPTCHA protection will be active on supported front-end forms.
Enable Protection
This toggle activates Google reCAPTCHA on your RepairPlugin forms.
If this option is disabled, reCAPTCHA will not run even if valid keys are entered.
Hide reCAPTCHA Badge (Optional)
This option hides the Google reCAPTCHA badge from the front end.
Note: If you hide the badge, Google requires you to mention reCAPTCHA usage in your website’s privacy policy.
Important Notes
RepairPlugin uses Google reCAPTCHA v3
A Google account is required to generate reCAPTCHA keys
Google may require billing depending on your reCAPTCHA usage
Changes take effect immediately after saving
Best Practices
Always enable CSRF Protection
Use Google reCAPTCHA on public booking pages
Test a booking submission after enabling security features
Keep your reCAPTCHA keys secure