Development Blog

If you run forms on a Grav site, you've almost certainly used Google reCAPTCHA. It's been built into the Form plugin for years. You sign up with Google, grab your two keys, paste them into the plugin config, and the spam mostly dries up. Free, simple, done.

Google changed that. reCAPTCHA isn't...

Grav 1.5.2 and the accompanying Admin plugin 1.8.10 provide an important new security feature. Grav now includes a powerful new security checking functionality that can be used from both the CLI and the Admin plugin.

From the command line you can simply run bin/grav security and Grav will ru...