Topic
Main
Site identity, languages, branding, auth, email, captcha, maintenance.
Guides
Articles
Step-by-step write-ups for this topic.
- Approve reseller on registerNew sign-ups get a reseller account flag automatically. Keep off on public sites.View article
- How to Set Up reCAPTCHA v2 for XFile UltraCreate a Google reCAPTCHA v2 checkbox key, paste the site and secret keys into Captcha & abuse, and enable forms.View article
- How to Set Up reCAPTCHA v3 for XFile UltraCreate a Google reCAPTCHA v3 score-based key, paste site and secret keys into Captcha & abuse, and optionally tune RECAPTCHA_V3_MIN_SCORE.View article
- How to Set Up Cloudflare Turnstile for XFile UltraCreate a Cloudflare Turnstile widget, copy site and secret keys into Captcha & abuse, and enable protected forms.View article
- How to Set Up hCaptcha for XFile UltraCreate an hCaptcha site, copy site and secret keys into Captcha & abuse, and enable protected forms.View article
- Email delivery modeHow the script sends mail: Sendmail, SMTP, or Gmail (XOAUTH2). Fix this before requiring verification.View article
- SMTP settingsSMTP server, port, username, password, and Encrypt connection (TLS) for outbound mail.View article
- Gmail XOAUTH2Send mail through Gmail with OAuth client ID/secret and Connect Google — not a Gmail password.View article
- Why mail lands in spamAlign From with how you send, use a domain you control, and check provider reputation when mail vanishes.View article
- Captcha providerImage, Text, reCAPTCHA v2/v3, hCaptcha, or Turnstile for enabled forms. Download captcha is separate.View article
- reCAPTCHA v2 keysSite key and secret for Google reCAPTCHA v2 (checkbox).View article
- reCAPTCHA v3 keysSite key and secret for score-based reCAPTCHA v3. Min score is env RECAPTCHA_V3_MIN_SCORE (default 0.5).View article
- hCaptcha keysSite key and secret for hCaptcha.View article
- Cloudflare Turnstile keysTurnstile site key plus secret stored as cloudflare_pri_key (legacy key name).View article
- Captcha on contactRequire captcha on the public /contact form.View article
- Captcha on report abuseRequire captcha on the public /report-abuse form.View article
- Captcha on ticketsCaptcha when signed-in members create tickets and post replies.View article
- Captcha on commentsRequire captcha when posting news or file comments (where comments are enabled).View article
- Captcha on registrationRequire captcha on /register — first line of defense against bot signups.View article
- Captcha on loginEnable captcha on sign-in. Always show, or only after failed attempts (see Captcha attempts per hour).View article