PHPackages coderflex/laravel-turnstile - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Validation & Sanitization](/categories/validation) 4. / 5. coderflex/laravel-turnstile ActiveLibrary[Validation & Sanitization](/categories/validation) coderflex/laravel-turnstile =========================== A package to help you implement the Cloudflare turnstile "CAPTCHA Alternative" v2.2.0(2w ago)114396.9k↓53.1%13[3 PRs](https://github.com/coderflexx/laravel-turnstile/pulls)3MITPHPPHP ^8.2|^8.3|^8.4CI passing Since May 28Pushed 1w ago3 watchersCompare [ Source](https://github.com/coderflexx/laravel-turnstile)[ Packagist](https://packagist.org/packages/coderflex/laravel-turnstile)[ Docs](https://github.com/coderflexx/laravel-turnstile)[ RSS](/packages/coderflex-laravel-turnstile/feed)WikiDiscussions main Synced 3d ago READMEChangelog (10)Dependencies (24)Versions (19)Used By (3) Laravel Turnstile ================= [](#laravel-turnstile) [![Latest Version on Packagist](https://camo.githubusercontent.com/7d923959b0855da463808dd1eddacafb9e4732cb9ed0398dfba8d5326b6f5208/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f636f646572666c65782f6c61726176656c2d7475726e7374696c652e7376673f7374796c653d666c61742d737175617265)](https://packagist.org/packages/coderflexx/laravel-turnstile)[![GitHub Tests Action Status](https://camo.githubusercontent.com/8f9b6c8c8a54b67d60ee701620a2b848ae27a786d212d164b998eee31885eab2/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f616374696f6e732f776f726b666c6f772f7374617475732f636f646572666c6578782f6c61726176656c2d7475726e7374696c652f72756e2d74657374732e796d6c3f6272616e63683d6d61696e266c6162656c3d7465737473267374796c653d666c61742d737175617265)](https://github.com/coderflexx/laravel-turnstile/actions?query=workflow%3Arun-tests+branch%3Amain)[![GitHub Code Style Action Status](https://camo.githubusercontent.com/a0fa3dba612b90e9b511ebe5437fd069df32402940294b64f8287761c31982c0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f616374696f6e732f776f726b666c6f772f7374617475732f636f646572666c6578782f6c61726176656c2d7475726e7374696c652f6669782d7068702d636f64652d7374796c652d6973737565732e796d6c3f6272616e63683d6d61696e266c6162656c3d636f64652532307374796c65267374796c653d666c61742d737175617265)](https://github.com/coderflexx/laravel-turnstile/actions?query=workflow%3A%22Fix+PHP+code+style+issues%22+branch%3Amain)[![Total Downloads](https://camo.githubusercontent.com/6c6099ef786430b9ca6c39f0ce08b9a8a217cb0c30481f109fe481a5c7d6ee82/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f64742f636f646572666c65782f6c61726176656c2d7475726e7374696c652e7376673f7374796c653d666c61742d737175617265)](https://packagist.org/packages/coderflex/laravel-turnstile) **Laravel Turnstile**, is a package to help you implement [cloudflare turnstile](https://developers.cloudflare.com/turnstile/) easily, and with no time. Installation ------------ [](#installation) You can install the package via composer: ``` composer require coderflex/laravel-turnstile ``` You can publish the config file with: ``` php artisan vendor:publish --tag="turnstile-config" ``` This is the contents of the published config file: ``` return [ /* |-------------------------------------------------------------------------- | Turnstile Keys |-------------------------------------------------------------------------- | | This value is the site, and the secret key of your application, after creating an application | with Cloudflare turnstile, copy the site key, and use it here, or in the .env | file. | Note that the secret key should not be publicly accessible. | | @see: https://developers.cloudflare.com/turnstile/get-started/#get-a-sitekey-and-secret-key | */ 'turnstile_site_key' => env('TURNSTILE_SITE_KEY', null), 'turnstile_secret_key' => env('TURNSTILE_SECRET_KEY', null), /* |-------------------------------------------------------------------------- | Error Messages |-------------------------------------------------------------------------- | | Here you can find the error messages for the application. You can modify | or translate the error message as you like. | | Note that you can translate the error message directly, without wrapping | them in translate helper. | */ 'error_messages' => [ 'turnstile_check_message' => 'The CAPTCHA thinks you are a robot! Please refresh and try again.', ], ]; ``` Optionally, you can publish the views using: ``` php artisan vendor:publish --tag="turnstile-views" ``` Turnstile Keys -------------- [](#turnstile-keys) To be able to use **Cloudflare Turnstile**, you need to get the `SiteKey`, and the `SecretKey` from your [Cloudflare dashboard](https://developers.cloudflare.com/turnstile/get-started/#get-a-sitekey-and-secret-key) After Generating the **keys**, use `TURNSTILE_SITE_KEY`, and `TURNSTILE_SECRET_KEY` in your `.env` file ``` TURNSTILE_SITE_KEY=2x00000000000000000000AB TURNSTILE_SECRET_KEY=2x0000000000000000000000000000000AA ``` If you want to test the widget, you can use the [Dummy site keys and secret keys](https://developers.cloudflare.com/turnstile/reference/testing/) that Cloudflare provides. Usage ----- [](#usage) ### Turnstile Widget Component [](#turnstile-widget-component) Once you require this package, you can use the turnstile widget in your form, like the following ``` ``` As you can see, the widget has few options to use. You can know more about them in the [configuration section](https://developers.cloudflare.com/turnstile/get-started/client-side-rendering/#configurations) ### Turnstile Backend Validation [](#turnstile-backend-validation) Once you used the widget component, in the frontend. You can validate **Cloudflare** Response, by using the `validate` method. Here's an example: ``` use Coderflex\LaravelTurnstile\Facades\LaravelTurnstile; public function store(Request $request) { // maybe you want to validate your form first $response = LaravelTurnstile::validate(); if (! $response['success']) { // will return boolean // do your logic } } ``` You may, optionally, send the **Cloudflare** response with the validation method. Something like the following: ``` public function store(Request $request) { ... $response = LaravelTurnstile::validate( $request->get('cf-turnstile-response'); // this will be created from the cloudflare widget. ); ... } ``` ### Turnstile Custom Rule [](#turnstile-custom-rule) If you want clean validation, you can use the `TurnstileCheck` custom rule, along with your form validation. Here's an example: ``` use Coderflex\LaravelTurnstile\Rules\TurnstileCheck; public function store(Request $request) { $request->validate([ 'cf-turnstile-response' => [new TurnstileCheck()] ]); } ``` The custom rule, will use the same logic, as the **backend validation**, but instead will check for the response, and return a validation message, if the captcha fails. You can change the content of the validation message, in `config/turnstile.php` file ``` return [ ... 'error_messages' => [ 'turnstile_check_message' => 'The CAPTCHA thinks you are a robot! Please refresh and try again.', ], ]; ``` **PS**: If you want to translate the message, just copy the message and translate it, because it uses the translator method behind the scene. Real Life Example ----------------- [](#real-life-example) In your blade file ``` @csrf @error('name') {{ $message }} @enderror @error('cf-turnstile-response') {{ $message }} @enderror Submit ``` In your controller: ``` use Coderflex\LaravelTurnstile\Rules\TurnstileCheck; use Coderflex\LaravelTurnstile\Facades\LaravelTurnstile; ... public function store(Request $request) { $request->validate([ 'name' => ['required', 'string', 'max:250'], 'cf-turnstile-response' => ['required', new TurnstileCheck()], ]); // or $response = LaravelTurnstile::validate(); if (! $response['success']) { // do your thing. } // do your things. } ``` Testing ------- [](#testing) ``` composer test ``` Changelog --------- [](#changelog) Please see [CHANGELOG](CHANGELOG.md) for more information on what has changed recently. Contributing ------------ [](#contributing) Please see [CONTRIBUTING](CONTRIBUTING.md) for details. Security Vulnerabilities ------------------------ [](#security-vulnerabilities) Please review [our security policy](../../security/policy) on how to report security vulnerabilities. Credits ------- [](#credits) - [ousid](https://github.com/ousid) - [All Contributors](../../contributors) License ------- [](#license) The MIT License (MIT). Please see [the License File](LICENSE.md) for more information. ### Health Score 65 — FairBetter than 99% of packages Maintenance97 Actively maintained with recent releases Popularity52 Moderate usage in the ecosystem Community23 Small or concentrated contributor base Maturity71 Established project with proven stability Bus Factor1 Top contributor holds 80% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~101 days Recently: every ~200 days Total 12 Last Release 16d ago Major Versions v1.0.4 → v2.0.02023-06-11 PHP version history (4 changes)v1.0.0PHP ^8.1 v2.0.1PHP ^8.1|^8.2 2.1.1PHP ^8.2|^8.3 v2.2.0PHP ^8.2|^8.3|^8.4 ### Community Maintainers ![](https://www.gravatar.com/avatar/fc6700ab1fdaa6344fb382fd2670393b22d15cd2aba3ab4964bc5235abf6e094?d=identicon)[ousid](/maintainers/ousid) --- Top Contributors [![ousid](https://avatars.githubusercontent.com/u/21012933?v=4)](https://github.com/ousid "ousid (36 commits)")[![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4)](https://github.com/dependabot[bot] "dependabot[bot] (5 commits)")[![laravel-shift](https://avatars.githubusercontent.com/u/15991828?v=4)](https://github.com/laravel-shift "laravel-shift (2 commits)")[![faabiopontes](https://avatars.githubusercontent.com/u/2223935?v=4)](https://github.com/faabiopontes "faabiopontes (1 commits)")[![jeffersongoncalves](https://avatars.githubusercontent.com/u/411493?v=4)](https://github.com/jeffersongoncalves "jeffersongoncalves (1 commits)") --- Tags bot-protectioncaptchacloudflarecloudflare-turnstilelaravellaravel-packagelaravel-turnstilephpspam-protectionturnstilevalidationlaravelcloudflarecoderflexturnstilelaravel-turnstile ### Code Quality TestsPest Code StyleLaravel Pint ### Embed Badge ![Health badge](/badges/coderflex-laravel-turnstile/health.svg) ``` [![Health](https://phpackages.com/badges/coderflex-laravel-turnstile/health.svg)](https://phpackages.com/packages/coderflex-laravel-turnstile) ``` ### Alternatives [spatie/laravel-health Monitor the health of a Laravel application 87512.0M165](/packages/spatie-laravel-health)[spatie/laravel-pdf Create PDFs in Laravel apps 1.0k4.8M47](/packages/spatie-laravel-pdf)[nativephp/mobile NativePHP for Mobile 1.1k75.1k93](/packages/nativephp-mobile)[simplestats-io/laravel-client Server-side analytics for Laravel that follows the full funnel from visit to registration to payment, attributed to the channel that drove it. Revenue, MRR, churn and ad-spend profit (ROAS/CAC) per channel. GDPR compliant, ad-blocker proof. 5021.9k](/packages/simplestats-io-laravel-client)[rawilk/profile-filament-plugin Profile & MFA starter kit for filament. 3914.6k](/packages/rawilk-profile-filament-plugin)[harris21/laravel-fuse Circuit breaker for Laravel queue jobs. Protect your workers from cascading failures. 44855.7k](/packages/harris21-laravel-fuse) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)