Truform Captcha for WHMCS

Protect your WHMCS installation from automated abuse with Truform Captcha by Syndaq.

Unlike static captchas that bots can replay, Truform generates a fresh puzzle on every request. Visitors complete a short visual challenge, and your server validates the result before login, signup, checkout, ticket submission, or form processing is accepted.

Built for WHMCS Workflows

The official Truform addon integrates with native WHMCS hooks, allowing you to enable protection per surface without rewriting your theme.

Truform can protect:

• Client area login
• Public contact form
• Client registration
• Password reset
• Support ticket submission
• Shopping cart checkout
• Admin login at /admin

Each protected form uses server-side verification, so submissions are rejected if validation fails, even if a bot attempts to bypass the browser widget.

Easy Setup

A guided setup wizard walks you through configuration in four steps:

1. Add your Truform site key and secret key
2. Test the connection to the Syndaq API
3. Choose which WHMCS forms to protect
4. Finish setup and go live

The addon dashboard shows your key status, plan quota, last verification result, and an embed snippet for custom templates. Theme compatibility notes are also included for popular WHMCS templates.

Operator-Friendly Controls

Truform gives WHMCS administrators practical controls for daily operation and troubleshooting.

Features include:

• Connection test with plan and quota display
• Widget theme options for light and dark layouts
• Widget size options
• Optional fail-open mode during API outages
• WHMCS Module Log integration for troubleshooting
• Clear error messages for domain, IP, and quota issues
• Optional update check for new addon releases

How It Works

1. Subscribe to Truform at Syndaq and create a site key for your WHMCS domain.
2. Install the addon under modules/addons/.
3. Activate the addon in Setup > Addon Modules.
4. Enter your tf_pub_ site key and tf_sec_ secret key.
5. Enable the forms you want protected and complete the wizard.

The widget loads from Syndaq's CDN, and verification runs against api.syndaq.com. No heavy JavaScript frameworks are required.

Requirements

• WHMCS 8.0 or later
• PHP 8.0 or later
• PHP cURL extension
• Active Truform subscription
• Free Starter tier available

Why Choose Truform?

Truform is designed to give WHMCS providers stronger abuse protection without making the customer experience painful.

Benefits include:

• Fresh puzzles on every request
• Protection against replay-style bot attacks
• Fast completion for real users
• Server-side token validation before WHMCS processes the request
• Domain-bound site keys
• Optional IP allowlists
• Usage dashboard, webhooks, and analytics in the Syndaq client area

Give your clients and staff a smoother experience while helping keep bots away from your login pages, contact forms, support tickets, and checkout flow.