Login No Captcha reCAPTCHA

Hi,

I’m experiencing an issue with Login No Captcha reCAPTCHA and Sucuri (and probably other plugins that verify authentication).

The issue is: when the user just open the wp-login page (GET request method), this plugin returns an error: “Please check the ReCaptcha box.” even if I did not submit the login form, and Sucuri log as authentication failed.

This happens because of this return (last from authenticate):

return new WP_Error('denied', __('Please check the ReCaptcha box.','login_nocaptcha'));

When the request method is not POST, it should return the $user received (first parameter of authenticate), and not the WP_Error above.

I propose you to add the code bellow, before checking if g-recaptcha-response is set.

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
  return $user;
}