1๐
โ
Iโm not entirely sure what you are asking but, you are validating that the response is valid for your webpage, the user could have gotten a reCaptcha response from another server then inserted that into your form submission.
The recaptcha_response
might be a valid response but not for your site, thats what you are checking. I hope that helps.
๐คMarshall Asch
Source:stackexchange.com