Hello all!
I’m using Cloudflare’s Turnstile for my contactforms and I entered the Site key and Secret key in the Bricks > Settings > API Keys tab. Turned on Spam protection with Turnstile on the form itself.
So all good on that part right?
When I check my Turnstile dashboard (on the Cloudflare website), it says this:
Siteverify isn’t being called for this widget
Without a server-side siteverify call, widget tokens aren’t validated. The form this widget protects remains open to bots. Spin can hand your AI coding agent a prompt that wires server-side siteverify into your existing backend.
Am I missing something? Do I need to something more besides entering the API keys and turning the Protection on on the forms?
What do I do? I have absolutely no idea how this works haha. Can anyone help out or point me in the right direction?
Cheers and thanks in advance!
Robbert