Use SSL to fetch recaptcha scripts.
Favor real (non-emulated) prepared statements.