Installation Steps
Step 1: Upload the Module
- Download the module package from your account or the provided source.
- Extract the downloaded ZIP file.
- Upload the extracted folder to the root directory in your WHMCS installation
- Ensure all files have the correct permissions (
755for folders,644for files).
Step 2: Activate the Module
- Log in to your WHMCS Admin Area.
- Navigate to Setup → Addon Modules.
- Locate Cloudflare Turnstile Security Captcha in the list.
- Click Activate.
- Set the required admin role access permissions.
- Click Save Changes.
Step 3: Configure the Module
- After activation, click on the Configure button next to the module name.
- Enter your Cloudflare Turnstile Site Key and Secret Key.
You can generate these keys from your Cloudflare Dashboard → Turnstile. - Select the pages where you want to enable Turnstile protection:
- Client Login Page
- Client Registration Page
- Contact Form
- Order Page
- Click Save Changes to apply your settings.
How to Obtain Cloudflare Turnstile Keys
- Log in to your Cloudflare Account.
- Navigate to Turnstile from the left-hand menu.
- Click Add Site.
- Enter your domain name (e.g., yourdomain.com).
- Select a Widget Mode:
- Managed (visible verification)
- Non-interactive (invisible verification)
- Click Create and copy your Site Key and Secret Key.
- Paste them into the WHMCS module configuration form.
Supported Forms
- Login Page (
clientarea.php) - Registration Form (
register.php) - Contact Us Form (
contact.php) - Order Form
Security Benefits
- Blocks bot registrations and fake logins
- Prevents spam form submissions
- Improves server security with minimal load
- Fully privacy-compliant (GDPR safe)
- Lightweight and faster than reCAPTCHA
Troubleshooting Guide
1. CAPTCHA not displaying
- Verify that your Turnstile keys are entered correctly.
- Ensure your WHMCS domain matches the one configured in Cloudflare Turnstile.
- Clear the browser and WHMCS template cache.
- Check if you have checked the page on which you want to show the turnstile.
2. “Verification Failed” or “Invalid Token”
- Double-check your secret key.
- Ensure WHMCS runs under HTTPS.
- Regenerate your Cloudflare keys if needed.
3. Module settings not saving
- Ensure your WHMCS admin has permission to manage addon modules.
Compatibility
- WHMCS Versions: 8.0 and above
- PHP Versions: 7.4 – 8.3
- Themes Supported: Six, Twenty-One, and custom templates