Gridbox 2.20.3. Cloudflare Turnstile Integration
As the web continues to evolve, so do the security requirements for websites. Automated requests and bot activity are becoming an increasingly common challenge, making modern protection essential for key areas of a website.
That’s why Joomla website builder Gridbox 2.20.3 introduces Cloudflare Turnstile integration — a modern solution designed to protect websites from automated traffic and bot activity.
For us, it was important not simply to add another CAPTCHA solution, but to choose one that would work reliably with Gridbox while remaining available across all supported Joomla versions. That’s why Cloudflare Turnstile will be available in Gridbox 2.20.3 for both Joomla 5 and Joomla 6.
Why Cloudflare Turnstile?
Cloudflare has extensive experience in cybersecurity, web application protection, and handling large volumes of internet traffic.
Cloudflare Turnstile is a modern alternative to traditional CAPTCHAs that helps protect websites from bots and automated attacks without requiring users to solve image puzzles or enter characters.
Feature
Description
User-Friendly
Verification happens almost invisibly and does not require users to solve a CAPTCHA.
Bot Protection
Turnstile analyzes requests to help distinguish real users from automated traffic.
Fast and Lightweight
Designed to have minimal impact on performance and the user experience.
Privacy-Focused
Built with user privacy in mind.
As a result, Cloudflare Turnstile provides an additional layer of protection while keeping the user experience simple and seamless.
Where Is Turnstile Available?
In Gridbox 2.20.3, Cloudflare Turnstile will be integrated into several features where protection against automated activity is especially important.
Login Plugin
Turnstile can be used to protect user login forms. This adds an extra layer of verification and helps reduce automated attempts to interact with the login form.
Store Registration and Login
For Gridbox Store, Turnstile will be available for both registration and login forms.
Registration is one of the areas that can be particularly vulnerable to automated activity, making an additional layer of verification especially useful.
Comments and Reviews
Turnstile will also be available for comments and reviews. This provides additional protection for forms where visitors submit content to the website and helps reduce automated submissions.
With the same protection technology available across these features, you can take a more consistent approach to protecting your websites from automated activity.
Want to set up Cloudflare Turnstile? Check out our documentation for detailed instructions on connecting the integration in Gridbox:
Additional Protection with Rate Limiting
Cloudflare Turnstile is not the only protection introduced in Gridbox 2.20.3. To provide an additional layer of security, Gridbox also includes Rate Limiting for authentication, password recovery, comments, and reviews.
Rate Limiting helps control how frequently requests can be sent to sensitive forms and actions. By limiting repeated requests within a specific time period, it helps reduce automated activity and repeated attempts while keeping these features available for legitimate visitors.
In Gridbox 2.20.3, Rate Limiting is applied to several important actions:
Action
Minimum Interval
Maximum Requests
Time Window
Login
5 seconds
5
60 seconds
Registration
15 seconds
3
10 minutes
Password Request
20 seconds
2
30 minutes
Password Reset
20 seconds
2
30 minutes
Username Reminder
20 seconds
2
30 minutes
Comments
10 seconds
5
5 minutes
Reviews
10 seconds
5
5 minutes
This provides an additional layer of protection alongside Cloudflare Turnstile. While Turnstile helps distinguish legitimate users from automated traffic, Rate Limiting controls the frequency of requests to sensitive website features.
Together, these protections help reduce automated login attempts, repeated registrations, password-related requests, and spam submissions while maintaining a smooth experience for regular visitors.
Cloudflare Turnstile in Gridbox 3
Cloudflare Turnstile will also be available in Gridbox 3. In addition, Gridbox 3 will offer two CAPTCHA integrations:
- Google reCAPTCHA
- Cloudflare Turnstile.
This will give you more flexibility to choose the solution that best fits your website.
Conclusion
Gridbox 2.20.3 continues our approach to improving the security of the platform: when we add a new security feature, it should be practical, reliable, and useful for our customers.
The Cloudflare Turnstile integration provides modern protection against automated activity without tying it to a specific Joomla version. It will be available in Gridbox 2.20.3 across all supported Joomla versions.
As a result, Gridbox customers on both Joomla 5 and Joomla 6 can use the same approach to protect login, registration, comments, and reviews.