antibot - check IP with sessions and recaptcha

2020-10-23 15:12:52 +02:00
parent 68d7988551
commit 397415211e
2 changed files with 2 additions and 1 deletions
--- a/lua/recaptcha.lua
+++ b/lua/recaptcha.lua
@@ -30,7 +30,7 @@ function M.check (token, recaptcha_secret)
 	local res, err = httpc:request_uri("https://www.google.com/recaptcha/api/siteverify", {
 		ssl_verify = false,
 		method = "POST",
-		body = "secret=" .. recaptcha_secret .. "&response=" .. token,
+		body = "secret=" .. recaptcha_secret .. "&response=" .. token .. "&remoteip=" .. ngx.var.remote_addr,
 		headers = { ["Content-Type"] = "application/x-www-form-urlencoded" }
 	})
 	if not res then