README

Contao Altcha Antispam

This is a Contao CMS implementation of Altcha. The extension provides a front end form field for the Contao form generator.

ALTCHA uses a proof-of-work (POW) mechanism to protect your forms from spam and abuse. Unlike other solutions, ALTCHA is self-hosted, does not use cookies nor fingerprinting, does not track users, and is fully compliant with GDPR.

Visit https://altcha.org

Installation

You can install the package via composer:

composer require markocupic/contao-altcha-antispam

Afterwards run the database migration task:

php vendor/bin/contao-console contao:migrate

Configuration and usage

The extension runs out of the box and no further configuration is required. Nevertheless, some parameters can be configured.

The Complexity can be adjusted by modifying the minimum and maximum values of the randomly generated secret number on the server side (markocupic_contao_altcha_antispam.range_min and markocupic_contao_altcha_antispam.range_max). A lower maximum value creates a less complex challenge, requiring fewer computational iterations for the client to find a matching solution. Conversely, a higher maximum value increases the complexity, demanding more computational resources and time from the client.

Run composer install in your terminal to clear and rebuild cache if you made changes to the config.yaml file.

# config/config.yaml
markocupic_contao_altcha_antispam:
  algorithm: 'SHA-256' # optional, default is SHA-256
  range_min: 290000 # Lower limit for the complexity (optional), default is 10000
  range_max: 300000 # Upper limit for the complexity (optional), default is 100000
  challenge_expiry: 3600 # optional, default is 3600

Endpoint (route)

Out of the box, the extension will use the /_contao_altcha_challenge endpoint to get the challenges.