All settings are available in the Control Panel under Stars → Settings. You can also override them in a config/stars.php file, which takes precedence and supports Craft’s environment variables.
Reject submissions that fill the hidden honeypot field
rateLimitMinutes
1440
Minimum minutes between submissions per IP + entry. 0 disables
minSubmissionTime
3
Minimum seconds a form must be open before submit. 0 disables
Rate limiting is context-aware: reviews and comments count against their own tables.
Captcha
Stars ships with a pluggable captcha layer that applies to both reviews and comments. Choose a provider and supply its keys:
Setting
Default
Description
captchaProvider
none
One of none, recaptcha_v3, recaptcha_v2, hcaptcha, turnstile
captchaSiteKey
empty
Public site key for the chosen provider
captchaSecretKey
empty
Secret key for server-side verification
recaptchaThreshold
0.5
Score threshold for reCAPTCHA v3 (0–1)
Use craft.reviews.captcha() / craft.comments.captcha() to render the widget on the frontend. The legacy enableRecaptcha / recaptcha* settings still work and are mapped to reCAPTCHA v3.
Privacy
Each piece of submission metadata can be stored or discarded independently for GDPR-style data minimization. All default to true.
Setting
Default
Description
captureIpAddress
true
Store the submitter’s IP. Required for the per-IP rate limiter
captureUserAgent
true
Store the browser user-agent string
captureReferrer
true
Store the HTTP referrer
Notifications, Schema & Features
Setting
Default
Description
enableNotifications
true
Email moderators on new submissions (and reply authors on new replies)
notificationEmails
empty
Comma-separated recipients. Blank uses the system email
enableSchemaOrg
true
Output Review + AggregateRating JSON-LD
schemaItemType
Product
Schema.org item type (Product, LocalBusiness, Book, etc.)
enablePros
true
Allow structured pro lists on reviews
enableCons
true
Allow structured con lists on reviews
enableAdminResponse
true
Allow admin responses on reviews
Comments
Setting
Default
Description
enableComments
true
Enable the threaded comment system
commentsRequireLogin
false
Require a logged-in user to comment
commentsAllowAnonymous
false
Allow comments without a name/email
maxCommentDepth
2
Maximum reply nesting (1 = no replies, 2 = one level, …)