From d62e3827ad6d1b45e0e208751e142faaa2d875c9 Mon Sep 17 00:00:00 2001
From: Brett Mason <brett@eighteen73.co.uk>
Date: Thu, 25 Sep 2025 12:26:02 +0100
Subject: [PATCH] Add random query param to Altcha challenge URLs to bypass
 caching

---
 includes/classes/ThirdParty/Altcha.php | 37 ++++++++++++++++++++++++++
 orbit.php                              |  1 +
 2 files changed, 38 insertions(+)
 create mode 100644 includes/classes/ThirdParty/Altcha.php

diff --git a/includes/classes/ThirdParty/Altcha.php b/includes/classes/ThirdParty/Altcha.php
new file mode 100644
index 0000000..dc4653e
--- /dev/null
+++ b/includes/classes/ThirdParty/Altcha.php
@@ -0,0 +1,37 @@
+<?php
+/**
+ * Modifications to Altcha.
+ *
+ * @package Orbit
+ */
+
+namespace Eighteen73\Orbit\ThirdParty;
+
+use Eighteen73\Orbit\Singleton;
+
+/**
+ * Modifications to Altcha.
+ */
+class Altcha {
+	use Singleton;
+
+	/**
+	 * Run on init
+	 *
+	 * @return void
+	 */
+	public function setup() {
+		add_filter( 'altcha_challenge_url', [ $this, 'altcha_challenge_url' ] );
+	}
+
+	/**
+	 * Override the Altcha challenge URL
+	 * We want to ensure the url is never cached, so we add a query string to ensure it's always unique.
+	 *
+	 * @param string $url The Altcha challenge URL
+	 * @return string
+	 */
+	public function altcha_challenge_url( string $url ): string {
+		return $url . '?r=' . wp_rand( 1000, 9999 );
+	}
+}
diff --git a/orbit.php b/orbit.php
index f52e9f4..5860f42 100644
--- a/orbit.php
+++ b/orbit.php
@@ -30,6 +30,7 @@
 DisallowIndexing\DisallowIndexing::instance()->setup();
 Performance\Fast404::instance()->setup();
 ThirdParty\WooCommerce::instance()->setup();
+ThirdParty\Altcha::instance()->setup();
 
 add_action(
 	'init',