Captcha (Visual Confirmation) for comments/registration/reporting/login/ecard - Page 26 Captcha (Visual Confirmation) for comments/registration/reporting/login/ecard - Page 26
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Captcha (Visual Confirmation) for comments/registration/reporting/login/ecard

Started by Sami, September 17, 2006, 07:04:22 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

okiem

ok - I solved problem

it was </html> on the very end of language file (after colsing php sign)

(ufffff ... 4 hours of searching!)

sussextransport

Well this seemed a very good plug-in for the spam problem but...

Installed the gallery back last November 2007, (1.4.12) all okay until every picture had spam comments added, & frequently, so removed manually all this on regular basis. Banning gibberish user/names too.
Yesterday 10/05/08 finally grasped knowledge to backup & installed the lastest update. All working fine.

Downloaded v3.0 Captcha, followed README file & installed in plug-in folder, and copied captcha.php to root folder, assume that is root of gallery not site root!

Now all I get is this on every attempt to access gallery folder & its index page!
http://sussex-transport.co.uk/gallery/admin.php 82.24.12.*** /gallery/admin.php sussex-transport.co.uk Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 403
Disabled it, then removed it, overwrote all the folders again from yesterdays backup, looked through the php tables & no plug-in now there but for the simple URL plug-in. This text response looks like its a 403 error!

What went wrong! The visitor gallery is now less operative than it was before the upgrade to 1.4.18 !!
Anyone like to suggest what I do now, I would follow a simple guide again but I did what it said, (why copy captcha.php to root, & which root?), then I can enable it, & add the debug panel for a visitor to assess, IF we can get in again.

Could not work out what the different download points are for the plug-in, only seems the one with 3 zip versions, so whats the reference to a MOD & not a plug-in for captcha?

Gordon Dinnage

Joachim Müller

Quote from: sussextransport on May 11, 2008, 11:23:51 AM
(why copy captcha.php to root, & which root?),
The coppermine root folder; if you installed coppermine into your webroot, then it's the webroot where captcha.php is supposed to reside. If you have your coppermine gallery in a sub-folder, the file captcha.php needs to go into that sub-folder as well.

sussextransport

Ta for that bit, & thats what I gathered, but why is that copied, two copies of it operating?
Both the original folder AND the root of the gallery itself.

Still rather miffed at losing ALL the gallery after that update & attempting to secure a method to stop spam comments to evry photo on the site.
Have restricted guests & basic members, hinders new joining, but how else to but for verification option.
Gordon Dinnage

Joachim Müller

Quote from: sussextransport on May 12, 2008, 12:43:43 AM
Ta for that bit, & thats what I gathered, but why is that copied, two copies of it operating?
Both the original folder AND the root of the gallery itself.
It isn't. If that is the case for you, you must have made a mistake.

Quote from: sussextransport on May 12, 2008, 12:43:43 AMStill rather miffed at losing ALL the gallery after that update & attempting to secure a method to stop spam comments to evry photo on the site.
Have restricted guests & basic members, hinders new joining, but how else to but for verification option.
If you have lost data, you have made a mistake. Roll back a backup in that case. Your issue seems to be beyond the scope of this thread, so you better start a thread of your own.

sussextransport

Quote from: Joachim Müller on May 12, 2008, 09:16:24 AM
It isn't. If that is the case for you, you must have made a mistake.
No mistake, I did what it said, thats just it, it says to COPY the captcha.php to the root folder of the coppermine gallery, where surely if its NOT to stay with all the other new files then it ought to be said to MOVE or CUT&PASTE that to the new location. To me COPY means just that, which is to duplicate.

As for the other issue, really annoying as it appears to have lost everything to do with the gallery for issue above ought to be better clarified I think in its description.
Gordon Dinnage

sussextransport

Gordon Dinnage

blazer380

I want to use a dark background image for my CAPTCHA letters. If I do that, how do I change the color of the letters that show up? I think it's this code:

// select random greyscale colour
            $iRandColour = rand(0, 100);

But how do I tell it to show lighter colors?

Nibbler

Shift the range up. Instead of 0-100 try 100-200. Increasing the contrast will probably weaken the captcha though.

tinorebel

Hallo, I have been looking f on the thread and made some search without resoult. I apologize if already asked:
How can I set captcha only on registration?
And not, for example in Log-in?

Is there a clean way to achive it?
???
I would not like to annoy my users to have to retype each time logging in, and I would like to stop those stupid bots from registering with awfal names... aka22234, abc1221, gon2653465 .... ::)

Live long and prosper!
www.tripodart.net

chadeldridge

I am sorry if this has been gone over before but I am not able to find it.  I have just done a fresh install of Coppermine and the first plugin I added was the Capcha one.  I get the image on the login page and the other pages, but not on the registration page.  However when you try to register you get an error saying the capcha confirmation code did not match (so its there, it just isnt showing).  Can you help me out?



sussextransport

Ok Im back with a steady gallery again, (I think) but back to captcha, loaded files again & moved the captcha.php to root also see that the plug-in seems to be enabled & loaded in config ok.

Now any click on most in my album list or menu (NOT as admin) takes users to my 404 error page!
So still baffled, cant see an admin option to tinker with it, just editing codebase.php and FTP I imagine.

So anyone like to say why it still does not work? At least my gallery appears accessable via admin.
How about anyone else, am I really stupid & still missing a really obvious step.
Really great idea with this plug-in, although only seen one other on the web that reckons it helps with blind users too.
For me this would be fine if I can get it to work as there is a contact point in the main site anyway.

www.sussex-transport.co.uk/gallery/

By the way, when I login to admin, it now brings up a visual verification image but comes up with this too, amoungst others;

Notices
/pluginmgr.php
Notice line 242: Undefined index: op

Gordon Dinnage

Vikitty

Emergency!

I tried using your steps to manually uninstall Captcha (as it's not working) and now it says I am BANNED.

edit: Okay, managed to delete the ban in PHPMyAdmin. The ban was a result of trying to log in with the captcha and being denied like 20 times (which is why I uninstalled).

Makc666

Russian Translation for 3.0 version

Anrulz

 " -You can set how many secounds should pass before we delete old records from database "

Can you please explain this a little bit ?

Ludo

Hi all,
I tried both this plugin and the original mod to let anonymous users leave comments avoiding spam, but I keep getting no confirmation code under comments box (and registration page too, with the plugin now installed), with the message "Confirmation code doesn't match" if an anonymous user tries to register or leave a comment.
Any suggestion to make it work?

My Gallery: http://vanrokken.altervista.org/
Gallery 1.4.18 with MiniCMS, Search Albums and Statistics - Hits plugins (Captcha on top)
PHP 4.4.8 with GD 2.0.28 and Freetype support enabled
Debug mode output as anonymous user on the displayimage.php page:
USER:
------------------
Array
(
    [ID] => 2cfd36c11a77c015e2279ae2293a330d
    [am] => 1
    [lang] => italian
    [lap] => 11
    [liv] => Array
        (
            [0] => 1336
            [1] => 649
            [2] => 432
            [3] => 1163
            [4] => 505
        )

    [search] => Array
        (
            [search] => dinavolo
            [album] => search
            [plugin_search_album] => true
            [newer_than] =>
            [older_than] =>
            [type] => AND
            [album_title] => on
        )

    [sort] => pa
)

==========================
USER DATA:
------------------
Array
(
    [user_id] => 0
    [user_name] => Guest
    [groups] => Array
        (
            [0] => 3
        )

    [group_quota] => 0
    [can_rate_pictures] => 0
    [can_send_ecards] => 0
    [can_post_comments] => 1
    [can_upload_pictures] => 0
    [can_create_albums] => 0
    [pub_upl_need_approval] => 1
    [priv_upl_need_approval] => 1
    [upload_form_config] => 0
    [num_file_upload] => 0
    [num_URI_upload] => 0
    [custom_user_upload] => 0
    [disk_max] => 0
    [disk_min] => 0
    [ufc_max] => 0
    [ufc_min] => 0
    [has_admin_access] => 0
    [group_name] => Guests
    [can_see_all_albums] => 0
    [group_id] => 3
)

==========================
Queries:
------------------
Array
(
    [0] => SELECT extension, mime, content, player FROM coppermine_filetypes; (0s)
    [1] => select * from coppermine_plugins order by priority asc; (0.001s)
    [2] => delete from `my_vanrokken`.coppermine_sessions where time<1211204833 and remember=0; (0s)
    [3] => delete from `my_vanrokken`.coppermine_sessions where time<1209998833; (0s)
    [4] => select user_id from `my_vanrokken`.coppermine_sessions where session_id = '2f340572ede4758e9b81e9a7927ec0d4' (0s)
    [5] => select user_id as id, user_password as password from `my_vanrokken`.coppermine_users where user_id=0 (0s)
    [6] => SELECT MAX(group_quota) as disk_max, MIN(group_quota) as disk_min, MAX(can_rate_pictures) as can_rate_pictures, MAX(can_send_ecards) as can_send_ecards, MAX(upload_form_config) as ufc_max, MIN(upload_form_config) as ufc_min, MAX(custom_user_upload) as custom_user_upload, MAX(num_file_upload) as num_file_upload, MAX(num_URI_upload) as num_URI_upload, MAX(can_post_comments) as can_post_comments, MAX(can_upload_pictures) as can_upload_pictures, MAX(can_create_albums) as can_create_albums, MAX(has_admin_access) as has_admin_access, MIN(pub_upl_need_approval) as pub_upl_need_approval, MIN( priv_upl_need_approval) as  priv_upl_need_approval FROM coppermine_usergroups WHERE group_id in (3) (0s)
    [7] => SELECT group_name FROM  coppermine_usergroups WHERE group_id= 3 (0s)
    [8] => update `my_vanrokken`.coppermine_sessions set time='1211208433' where session_id = '2f340572ede4758e9b81e9a7927ec0d4' (0s)
    [9] => SHOW TABLES LIKE 'coppermine_cms_config' (0.001s)
    [10] => SELECT * FROM coppermine_cms_config (0s)
    [11] => DELETE FROM coppermine_banned WHERE expiry < '2008-05-19 16:47:14' (0s)
    [12] => SELECT * FROM coppermine_banned WHERE (ip_addr='79.27.21.18' OR ip_addr='79.27.21.18' OR user_id=0) AND brute_force=0 (0s)
    [13] => SELECT aid FROM coppermine_albums WHERE visibility != '0' AND visibility !='10000' AND visibility NOT IN (3) (0s)
    [14] => SELECT aid FROM coppermine_albums (0s)
    [15] => SELECT aid from coppermine_pictures WHERE pid='505' AND aid IN (1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72)  LIMIT 1 (0s)
    [16] => SELECT title,keyword from coppermine_albums WHERE aid='29' (0s)
    [17] => SELECT COUNT(*) from coppermine_pictures WHERE ((aid='29'  AND aid NOT IN (73,74) ) ) AND approved='YES' AND aid IN (1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72)  (0.001s)
    [18] => SELECT pid, filepath, filename, url_prefix, filesize, pwidth, pheight, ctime, aid, keywords, title, caption,hits,owner_id,owner_name from coppermine_pictures WHERE ((aid='29'  AND aid NOT IN (73,74) ) ) AND approved='YES' AND aid IN (1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72)  ORDER BY position ASC  (0.002s)
    [19] => SELECT title,keyword from coppermine_albums WHERE aid='29' (0s)
    [20] => SELECT COUNT(*) from coppermine_pictures WHERE ((aid='29'  AND aid NOT IN (73,74) ) ) AND approved='YES' AND aid IN (1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72)  (0s)
    [21] => SELECT * from coppermine_pictures WHERE ((aid='29'  AND aid NOT IN (73,74) ) ) AND approved='YES' AND aid IN (1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72)  ORDER BY position ASC  LIMIT 32 ,1 (0.001s)
    [22] => SELECT title, comments, votes, category, aid FROM coppermine_albums WHERE aid='29' LIMIT 1 (0s)
    [23] => SELECT name, parent FROM coppermine_categories WHERE cid = '2' (0s)
    [24] => UPDATE coppermine_pictures SET hits=hits+1, lasthit_ip='79.27.21.18', mtime=CURRENT_TIMESTAMP WHERE pid='505' (0.028s)
    [25] => INSERT INTO coppermine_hit_stats
                          SET
                            pid = 505,
                            search_phrase = '',
                            Ip   = '79.27.21.18',
                            sdate = '1211208434',
                            referer='http%3A%2F%2Fvanrokken.altervista.org%2Findex.php',
                            browser = 'Unknown',
                            os = 'Windows 98' (0.054s)
    [26] => SELECT COUNT(*) from coppermine_pictures WHERE approved = 'YES' AND aid IN (1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72)  (0.007s)
    [27] => SELECT * FROM coppermine_pictures WHERE approved = 'YES' AND aid IN (1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72)  ORDER BY RAND()  (0.057s)
    [28] => SELECT * FROM coppermine_exif WHERE filename='albums/viaggi/alassio0609/IMG_0227.JPG' (0s)
    [29] => INSERT INTO coppermine_exif VALUES ('albums/viaggi/alassio0609/IMG_0227.JPG', 'a:10:{s:13:\"VerboseOutput\";i:0;s:6:\"Errors\";i:0;s:9:\"ValidJpeg\";i:1;s:13:\"ValidIPTCData\";i:0;s:13:\"ValidJFIFData\";i:1;s:13:\"ValidEXIFData\";i:0;s:13:\"ValidAPP2Data\";i:0;s:12:\"ValidCOMData\";i:1;s:4:\"JFIF\";a:4:{s:4:\"Size\";i:16;s:4:\"Data\";s:14:\"JFIF\0\0H\0H\0\0\";s:10:\"Identifier\";s:5:\"JFIF\0\";s:13:\"ExtensionCode\";s:2:\"01\";}s:3:\"COM\";a:2:{s:4:\"Size\";i:15;s:4:\"Data\";s:13:\"        Corp.\";}}') (0.123s)
    [30] => SELECT msg_id, msg_author, msg_body, UNIX_TIMESTAMP(msg_date) AS msg_date, author_id, author_md5_id, msg_raw_ip, msg_hdr_ip, pid FROM coppermine_comments WHERE pid='505' ORDER BY msg_id ASC (0.002s)
    [31] => SELECT title,keyword from coppermine_albums WHERE aid='29' (0s)
    [32] => SELECT COUNT(*) from coppermine_pictures WHERE ((aid='29'  AND aid NOT IN (73,74) ) ) AND approved='YES' AND aid IN (1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72)  (0.001s)
    [33] => SELECT pid, filepath, filename, url_prefix, filesize, pwidth, pheight, ctime, aid, keywords, title, caption,hits,owner_id,owner_name from coppermine_pictures WHERE ((aid='29'  AND aid NOT IN (73,74) ) ) AND approved='YES' AND aid IN (1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72)  ORDER BY position ASC  LIMIT 28 ,8 (0.001s)
    [34] => SELECT * FROM coppermine_cms WHERE conid='505' AND type='2' ORDER BY cpos (0.051s)
)

==========================
GET :
------------------
Array
(
    [album] => random
    [cat] => 0
    [pos] => -505
)

==========================
POST :
------------------
Array
(
)


Debug mode output trying to leave a comment as an anonymous user:
USER:
------------------
Array
(
    [ID] => 2cfd36c11a77c015e2279ae2293a330d
    [am] => 1
    [lang] => italian
    [lap] => 11
    [liv] => Array
        (
            [0] => 1336
            [1] => 649
            [2] => 432
            [3] => 1163
            [4] => 505
        )

    [search] => Array
        (
            [search] => dinavolo
            [album] => search
            [plugin_search_album] => true
            [newer_than] =>
            [older_than] =>
            [type] => AND
            [album_title] => on
        )

    [sort] => pa
)

==========================
USER DATA:
------------------
Array
(
    [user_id] => 0
    [user_name] => Guest
    [groups] => Array
        (
            [0] => 3
        )

    [group_quota] => 0
    [can_rate_pictures] => 0
    [can_send_ecards] => 0
    [can_post_comments] => 1
    [can_upload_pictures] => 0
    [can_create_albums] => 0
    [pub_upl_need_approval] => 1
    [priv_upl_need_approval] => 1
    [upload_form_config] => 0
    [num_file_upload] => 0
    [num_URI_upload] => 0
    [custom_user_upload] => 0
    [disk_max] => 0
    [disk_min] => 0
    [ufc_max] => 0
    [ufc_min] => 0
    [has_admin_access] => 0
    [group_name] => Guests
    [can_see_all_albums] => 0
    [group_id] => 3
)

==========================
Queries:
------------------
Array
(
    [0] => SELECT extension, mime, content, player FROM coppermine_filetypes; (0s)
    [1] => select * from coppermine_plugins order by priority asc; (0s)
    [2] => delete from `my_vanrokken`.coppermine_sessions where time<1211204995 and remember=0; (0s)
    [3] => delete from `my_vanrokken`.coppermine_sessions where time<1209998995; (0s)
    [4] => select user_id from `my_vanrokken`.coppermine_sessions where session_id = '2f340572ede4758e9b81e9a7927ec0d4' (0s)
    [5] => select user_id as id, user_password as password from `my_vanrokken`.coppermine_users where user_id=0 (0s)
    [6] => SELECT MAX(group_quota) as disk_max, MIN(group_quota) as disk_min, MAX(can_rate_pictures) as can_rate_pictures, MAX(can_send_ecards) as can_send_ecards, MAX(upload_form_config) as ufc_max, MIN(upload_form_config) as ufc_min, MAX(custom_user_upload) as custom_user_upload, MAX(num_file_upload) as num_file_upload, MAX(num_URI_upload) as num_URI_upload, MAX(can_post_comments) as can_post_comments, MAX(can_upload_pictures) as can_upload_pictures, MAX(can_create_albums) as can_create_albums, MAX(has_admin_access) as has_admin_access, MIN(pub_upl_need_approval) as pub_upl_need_approval, MIN( priv_upl_need_approval) as  priv_upl_need_approval FROM coppermine_usergroups WHERE group_id in (3) (0s)
    [7] => SELECT group_name FROM  coppermine_usergroups WHERE group_id= 3 (0s)
    [8] => update `my_vanrokken`.coppermine_sessions set time='1211208595' where session_id = '2f340572ede4758e9b81e9a7927ec0d4' (0s)
    [9] => DELETE FROM coppermine_plugin_captcha where UNIX_TIMESTAMP(time) < 1211208295  (0s)
    [10] => SELECT COUNT(*) AS ccount FROM coppermine_plugin_captcha WHERE ((ip_addr = '79.27.21.18') AND (code ='d41d8cd98f00b204e9800998ecf8427e')) LIMIT 1 (0s)
)

==========================
GET :
------------------
Array
(
)

==========================
POST :
------------------
Array
(
    [msg_author] => Anonimo
    [msg_body] => bello!
    [event] => comment
    [pid] => 505
    [submit] => OK
)

No PHP errors.

Hein Traag

Re-active the plugin so we can get a good look at the effect on your site.

Ludo

It is active at this moment: plugin installed and captcha.php moved to gallery root

Joachim Müller

When looking at the ouput generated by your gallery I can't spot reference to the captcha. Are you sure that you have installed the plugin? If yes, please attach a screenshot of your pluginmanager page to your posting.
The captcha itself is working as expected - go to http://vanrokken.altervista.org/captcha.php to verify.