Hello,
I'm running OpenLiteSpeed and have reCAPTCHA enabled in the security settings.
CAPTCHA is working as expected for browser requests and for headless clients like curl or wget when a User-Agent header is present (even if it's blank).
However, if I do a raw curl with no User-Agent header at all (e.g. a raw curl with no -A), the full page loads without showing the CAPTCHA challenge page. That's not ideal.
Is this an OpenLiteSpeed limitation, or is there a way to trigger the reCAPTCHA even when the User-Agent header is missing entirely?
Ideally, I'd like to serve the lightweight CAPTCHA challenge before any of my main website's backend logic runs, especially during high traffic or abuse.
Thanks
I'm running OpenLiteSpeed and have reCAPTCHA enabled in the security settings.
CAPTCHA is working as expected for browser requests and for headless clients like curl or wget when a User-Agent header is present (even if it's blank).
However, if I do a raw curl with no User-Agent header at all (e.g. a raw curl with no -A), the full page loads without showing the CAPTCHA challenge page. That's not ideal.
Is this an OpenLiteSpeed limitation, or is there a way to trigger the reCAPTCHA even when the User-Agent header is missing entirely?
Ideally, I'd like to serve the lightweight CAPTCHA challenge before any of my main website's backend logic runs, especially during high traffic or abuse.
Thanks