Lead form completed (evidence-based)

What to fix

Allow a successful test submit by providing a QA path through CAPTCHA and plugin validation.

Step-by-step fix

1. Create a QA mode: reCAPTCHA test keys, a whitelist for the scan bot IP if your host documents one, or a hidden “scan” form that posts to the same handler without the challenge.
2. Remove hidden required fields that humans never see but bots leave empty.
3. Confirm the form’s AJAX endpoint returns success for a valid payload (plugin entry logs or network tab).
4. Document the QA path so you do not leave production wide open.

Choose the path for your setup

• Cloudflare Bot Fight / Turnstile

  Add a hostname or path exception for the QA URL, or use Turnstile test keys on staging.

Confirm it is fixed

Re-scan and confirm B3 shows evidence that submit completed.