Install the Plugin

Pre-flight Checklist

• [ ] PHP 7.4 or higher (run php -v)
• [ ] WordPress 5.8 or higher
• [ ] WooCommerce 8.0 or higher, installed and active
• [ ] MySQL 5.7+ or MariaDB 10.3+
• [ ] You have admin login
• [ ] curl enabled on the server (needed to hit the Cloudflare verify API)

System Requirements

Recommended

How to Install the Plugin

Three install methods. Pick what matches your style.

Option 1 — Upload the ZIP (Easiest)

1. Download turnstile-captcha-for-woocommerce.zip from your Webkul account or CodeCanyon
2. In WordPress, go to Plugins → Add New and click Upload Plugin
3. Click Choose File, pick the ZIP, click Install Now
4. Wait for "Plugin installed successfully" and click Activate Plugin

Option 2 — FTP or SFTP

Use this if your host limits file upload size.

1. Unzip turnstile-captcha-for-woocommerce.zip on your computer
2. Open your FTP/SFTP client (FileZilla, Cyberduck) and connect to your server
3. On the remote side, go to /wp-content/plugins/
4. Drag the unzipped turnstile-captcha-for-woocommerce folder and drop it in
5. In WordPress, go to Plugins → Installed Plugins
6. Find Turnstile CAPTCHA For WooCommerce and click Activate

Option 3 — WP-CLI (For Developers)

wp plugin install /path/to/turnstile-captcha-for-woocommerce.zip --activate

What Happens After You Activate

Four things happen automatically.

1. A New Admin Menu Appears

You get two entry points:

• WooCommerce → Turnstile Settings — The 9-tab settings page (slug: wkcft-settings)
• WooCommerce → Webkul Addons → Analytics — The analytics dashboard (slug: wkcft-analytics)

2. Database Table Is Created

A single log table is added.

No PII is stored. IPs are kept in their raw form for rate-limiting but hashed for analytics aggregates.

3. Onboarding Wizard Launches

A 3-step guided setup opens automatically at ?page=wkcft-onboarding:

• Step 1 — Paste your Site Key + Secret Key
• Step 2 — Pick which forms to protect
• Step 3 — Review and finish

If you close it mid-way, a persistent banner in the admin takes you back until you finish or dismiss.

4. Compatibility Declared

The plugin declares compatibility with:

• HPOS (High-Performance Order Storage / custom order tables)
• Cart/Checkout Blocks (modern WooCommerce checkout)

You do not need to do anything — WooCommerce reads this and stops showing the "plugin not yet compatible" notices.

Verify the Install

Open WooCommerce → Turnstile Settings. You should see:

• The tabbed settings page with 9 tabs across the top
• A header banner prompting you to enter API keys (if the wizard was skipped)
• The API Settings tab selected by default
• No PHP errors, no blank page

Open WooCommerce → Webkul Addons → Analytics. You should see:

• "No data yet" message (expected — no form submits have run)
• Empty charts
• Date range selector

If both pages load cleanly, the plugin is installed correctly.

How to Uninstall or Reset

• Deactivate — Keeps all your data. Options and logs stay in place
• Delete (Plugins screen) — Removes the files but keeps options in case of reinstall
• Full wipe — Delete the plugin, then run these SQL statements:

DROP TABLE IF EXISTS wp_wkcft_log;
DELETE FROM wp_options WHERE option_name LIKE 'wkcft_%';
DELETE FROM wp_options WHERE option_name LIKE '_transient_wkcft_%';
DELETE FROM wp_options WHERE option_name LIKE '_transient_timeout_wkcft_%';

Troubleshooting

Where to Go Next

1. Get Turnstile Keys — Create Cloudflare account, copy Site Key + Secret Key
2. Onboarding Wizard — The guided 3-step setup
3. First-Time Setup — Full manual walkthrough
4. Quick Start — Minimum-steps summary