add recaptcha option

src/inc/routes/register.mjs

@@ -88,7 +88,23 @@ export default (router, tpl) => {
             return renderError("Passwords do not match.");
         }
 
-        // Registration Logic
+        // reCAPTCHA verification
+        if (cfg.recaptcha?.enabled && cfg.recaptcha?.secret_key) {
+            const rcToken = req.post['g-recaptcha-response'];
+            if (!rcToken) return renderError("Please complete the reCAPTCHA.");
+            try {
+                const verifyRes = await fetch('https://www.google.com/recaptcha/api/siteverify', {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                    body: new URLSearchParams({ secret: cfg.recaptcha.secret_key, response: rcToken, remoteip: ip })
+                });
+                const { success } = await verifyRes.json();
+                if (!success) return renderError("reCAPTCHA verification failed. Please try again.");
+            } catch (e) {
+                console.error('[REGISTER] reCAPTCHA error:', e.message);
+                return renderError("reCAPTCHA check failed. Please try again.");
+            }
+        }
         let activated = true;
         let activationToken = null;
 

src/index.mjs

@@ -1092,6 +1092,8 @@ process.on('uncaughtException', err => {
     enable_userhall_image_upload: cfg.websrv.enable_userhall_image_upload !== false,
     abyss_enabled: cfg.websrv.abyss_enabled !== false,
     smtp_enabled: !!(cfg.smtp && cfg.smtp.enabled && cfg.smtp.mail_reset_password),
+    recaptcha_enabled: !!(cfg.recaptcha && cfg.recaptcha.enabled && cfg.recaptcha.site_key),
+    recaptcha_site_key: (cfg.recaptcha && cfg.recaptcha.site_key) || '',
     show_background_cfg: cfg.websrv.background !== false,
     allowed_mimes: Object.keys(cfg.mimes).concat([...new Set(Object.values(cfg.mimes))].map(ext => `.${ext}`)).join(','),
     mimes_json: JSON.stringify(cfg.mimes),