Deutsch Demo shop Store

Mandatory fields, limits and CAPTCHA

What you set on the field, the sender notices right away, and the server still does not rely on it.

The option becomes an HTML attribute

What you enter under "Options" ends up on the field in the storefront. The browser keeps to it before anything is sent at all.

your-shop.example/admin
FormsCancelSave
FormStructureElement
Form element
GeneralOptionsConditions
Validation
08:00
18:00
900

CancelSave

  • Time

    In the formmin=08:00 max=18:00 step=900

    Effecta 15-minute grid

  • Date

    In the formmin=2026-06-22 max=2026-12-31

    Effectonly within the period

  • Number

    In the formmin=1 max=100 step=1

    Effectwhole numbers from 1 to 100

  • Slider

    In the formmin=0 max=10 step=1

    Effecteleven steps

  • File upload

    In the formaccept=.pdf,.jpg,.png

    Effectthe file dialog only offers these

Validated twice

Once so it feels good. Once so it is true.

Planned quantity *
0
The smallest allowed value is 1.
  • min="1" checked by the browser
  • max="10000" checked by the browser
  • required checked by the browser
  • and again on the server afterwards

If validation fails, the form comes back with the entered values and the error messages. Only the form area is swapped, the page does not reload.

  • In the browser

    Mandatory fields, character limits, number ranges and allowed file extensions are real attributes. The sender gets feedback right away, without a detour via the server.

  • On the server

    Afterwards the server checks the same rules again (and before that, which elements were visible at all according to their conditions). What was invisible is neither required nor stored.

The CAPTCHA comes from Shopware

There is no second place for keys here.

your-shop.example/admin
Form Managerby digitvisionSave
All Sales Channels
CAPTCHA
Activate CAPTCHA

  • Form spam protection here means the shop's CAPTCHA. The plugin configuration has one switch for it, nothing more. If it is on, whatever is entered as the active CAPTCHA under Settings, Shop, Basic Information is validated, per sales channel.

  • The plugin stores no keys of its own. Whoever changes provider changes it in one place, and the form follows.

Exactly three are validated: honeypot, basic CAPTCHA and Google reCAPTCHA v3 (three of the four the Shopware core brings; Google reCAPTCHA v2 is not among them). The honeypot keeps spam out without customers solving a CAPTCHA: a hidden field that only bots fill in.

That list is fixed. If a CAPTCHA is active in the shop that is not on it (Google reCAPTCHA v2 from the core, say, or Friendly Captcha, which the paid Shopware plans add), it is skipped on this form, without an error. The honeypot still applies if it is active as well.

Going deeper

Layout

Groups, rows and the twelve-column grid.

Fields

All 23 field types and what they do.