{"id":6964,"date":"2023-11-23T07:22:08","date_gmt":"2023-11-23T07:22:08","guid":{"rendered":"https:\/\/musilda.cz\/?p=6964"},"modified":"2023-11-23T07:22:08","modified_gmt":"2023-11-23T07:22:08","slug":"jak-pridat-recaptcha-do-prihlasovaciho-formulare","status":"publish","type":"post","link":"https:\/\/affinite.io\/cs\/jak-pridat-recaptcha-do-prihlasovaciho-formulare\/","title":{"rendered":"Jak p\u0159idat reCAPTCHA do p\u0159ihla\u0161ovac\u00edho formul\u00e1\u0159e"},"content":{"rendered":"\n

Po zalo\u017een\u00ed nov\u00e9ho WordPress webu n\u00e1m bez dostate\u010dn\u00e9ho zabezpe\u010den\u00ed hroz\u00ed spam a automatizovan\u00e9 \u00fatoky bot\u016f, kte\u0159\u00ed se sna\u017e\u00ed z\u00edskat p\u0159\u00edstup do na\u0161\u00ed administrace. T\u00edm nejzn\u00e1m\u011bj\u0161\u00edm \u00fatokem je tzv. „brute force login attack“, kter\u00fd m\u00e1 seznam n\u00e1hodn\u00fdch jmen a hesel, pomoc\u00ed kter\u00e9ho se sna\u017e\u00ed p\u0159ihl\u00e1sit do na\u0161eho WordPressu p\u0159es p\u0159ihla\u0161ovac\u00ed formul\u00e1\u0159. <\/p>\n\n\n\n

Po chv\u00edli zkou\u0161en\u00ed by byl bot zablokov\u00e1n na z\u00e1klad\u011b IP adresy pomoc\u00ed n\u011bkter\u00e9ho z plugin\u016f, nebo d\u00edky hostingu. Proto \u00fato\u010dn\u00edk prov\u00e1d\u00ed \u00fatoky z co nejv\u00edce (v\u011bt\u0161inou kraden\u00fdch) server\u016f(majitel\u00e9 web\u016f v\u011bt\u0161inou nic netu\u0161\u00ed) a z co nejv\u00edce lokalit pro zv\u00fd\u0161en\u00ed \u00fasp\u011b\u0161nosti napaden\u00ed a pro minim\u00e1ln\u00ed procento odhalen\u00ed. <\/p>\n\n\n\n

Z toho d\u016fvodu bychom nikdy nem\u011bli nech\u00e1vat defaultn\u00ed jm\u00e9no u\u017eivatele po zalo\u017een\u00ed WordPressu, a zm\u011bnit jej na jin\u00e9. Nab\u00edz\u00ed se spousta zp\u016fsob\u016f ochrany, jejich\u017e souhrn najdete zde(Velk\u00fd pr\u016fvodce bezpe\u010dnost\u00ed WordPressu)<\/a>. V tomto \u010dl\u00e1nku se v\u0161ak podrobn\u011bji zam\u011b\u0159\u00edme na Google reCaptcha, pomoc\u00ed n\u011bho\u017e jsme schopni jednodu\u0161e a efektivn\u011b zabr\u00e1nit potencion\u00e1ln\u00edm \u00fatok\u016fm. <\/p>\n\n\n\n

Co je to reCAPTCHA<\/h2>\n\n\n\n

Je nezpoplatn\u011bn\u00e1 slu\u017eba od Google, kter\u00e1 chr\u00e1n\u00ed webov\u00e9 str\u00e1nky proti spamu a zneu\u017eit\u00ed. „CAPTCHA“ je tzv. Turing\u016fv test, kter\u00fd by m\u011bl zjistit, jestli je u\u017eivatelem \u010dlov\u011bk, nebo um\u011bl\u00e1 inteligence. Slu\u017ebu reCAPTCHA m\u016f\u017eeme jednodu\u0161e a zdarma p\u0159idat i na na\u0161e webov\u00e9 str\u00e1nky. Google reCAPTCHA nab\u00edz\u00ed hned n\u011bkolik verz\u00ed, z nich\u017e si uvedeme dv\u011b nejpopul\u00e1rn\u011bj\u0161\u00ed.<\/p>\n\n\n\n

Google reCAPTCHA v2<\/h3>\n\n\n\n

Funguje na z\u00e1klad\u011b ov\u011b\u0159en\u00ed u\u017eivatelem. Jsou dva zp\u016fsoby interakce:<\/p>\n\n\n\n

    \n
  1. Za\u0161krt\u00e1vac\u00ed pol\u00ed\u010dko „Nejsem robot“, kde u\u017eivatel\u00e9 jednodu\u0161e kliknou na za\u0161krt\u00e1vac\u00ed pol\u00ed\u010dko k potvrzen\u00ed, \u017ee nejsou roboti<\/li>\n\n\n\n
  2. V tomto p\u0159\u00edpad\u011b nen\u00ed nutn\u00e1 p\u0159\u00edm\u00e1 interakce s u\u017eivatelem, kter\u00fd pouze klikne na existuj\u00edc\u00ed tla\u010d\u00edtko(nebo pomoc\u00ed JS API) na webu, kter\u00e9 na pozad\u00ed spust\u00ed reCAPTCHA.<\/li>\n<\/ol>\n\n\n\n

    Nev\u00fdhody<\/h4>\n\n\n\n