How to Implement Google reCAPTCHA in Laravel to Prevent Bot Spam.

🚀 Why You Need reCAPTCHA in Laravel?

Bots often target web forms such as login, registration, or contact forms to send spam or perform brute-force attacks. Google reCAPTCHA is a powerful tool that helps distinguish between human users and automated bots, keeping your Laravel application safe.

🔑 Step 1: Get Google reCAPTCHA API Keys :-

1. Go to Google reCAPTCHA Admin Console.
2. Login with your google account.
3. Go in the Guide menu and click on Get Started button.
4. Register your site and choose reCAPTCHA v3.
5. Copy the Site Key and Secret Key.
6. Submit changes.

Load below js API : 

 <script src="https://www.google.com/recaptcha/api.js"></script>

Add a callback function to handle the token.

 <script>
   function onSubmit(token) {
     document.getElementById("demo-form").submit();
   }
 </script>

Add attributes to your html button.

<button class="g-recaptcha" 
        data-sitekey="reCAPTCHA_site_key" 
        data-callback='onSubmit' 
        data-action='submit'>Submit</button>

Now Create rule for captcha with artisan command

php artisan make:rule captchaRule

Write rule in the captchaRule.php

$response = Http::asForm()->post('https://www.google.com/recaptcha/api/siteverify', [
   'secret' => env('GOOGLE_RECAPTCHA_SECRET'),
   'response' => $value,
   'remoteip' => request()->ip(),
])->json();
if (!isset($response['success']) || $response['success'] !== true) {
   $fail('The reCAPTCHA verification failed. Please try again.');
}

Now you need to add validation in controller for captcha

use App\Rules\ReCaptcha;
$validator = Validator::make($request->all(), [
    'g-recaptcha-response' => [new ReCaptcha]
]);

Show the error message