splitbrain / dokuwiki-plugin-captcha Goto Github PK

Hi,

I have hogfather version of dokuwiki and captcha plugin 2022-01-11, configured to use Text (prefilled with JavaScript).

The problem is on the very first login attempt I get error message,
Sorry, but the CAPTCHA wasn't answered correctly. Maybe you're not human at all?
But on successive attempt it succeeds.

What can I do to make the very first login attempt succeed?

To correctly work with symlinks, the use of realpath() is discouraged. DokuWiki's fullpath() should be used instead.

Hi,

the translation for de-informal is missing, so there is displayed the english version on german wikis.

greets

flam

Hi,

There are a few pending translations from translate.dokuwiki.org.

I think my last 2 contributions, lang_update_375_1642744009 and lang_update_372_1642369578, would overwrite LORTET's. Could you find a few minutes to discard these and commit the rest ?

Thanks.

plugins/captcha/captcha/img.php
18:$rand = PMA_blowfish_decrypt($_REQUEST['secret'], auth_cookiesalt());

plugins/captcha/captcha/helper.php
110: $rand = PMA_blowfish_decrypt($_REQUEST[$this->field_sec], auth_cookiesalt());

plugins/captcha/captcha/wav.php
24:$rand = PMA_blowfish_decrypt($_REQUEST['secret'],auth_cookiesalt());

plugins/captcha/captcha/helper.php
53: $secret = PMA_blowfish_encrypt($rand, auth_cookiesalt());

etc etc...

When accessing the CAPTCHA screen and registering, the alignment of the text boxes is centered which makes the box flow off to the right on some mobile devices in portrait mode (in non desktop mode) particularly if the text box is expanded.
I think the problem would be easily solved with LEFT alignment of the line showing the svg captcha text speaker icon and box. That would greatly increase usability. Could the box be tinted to invite input?
In the configuration section could the default values be made clear so they can be reverted to if changed with a poor outcome and a default value for just that field is desired?

If I enter wrong login credentials, captcha check fails with the message Sorry, but the CAPTCHA wasn't answered correctly. Maybe you're not human at all?

Sometimes this does not happen at the first failed attempt, but the second or third consecutive one.

Debugging shows me that in those cases \helper_plugin_captcha::retrieveCaptchaCookie returns false, because it does not find a cookie file. A cookie does exist, but it has a different name.

Logging in with correct credentials does not seem to be affected.

It works well with Chromium + Linux MINT or Mozilla Firefox + Linux MINT but it doesn't work with Chrome navigator version 37.0.2062.102 m + Windows XP Pro :

Warning: mdecrypt_generic(): An empty string was passed in /home/energino/public_html/urbolienne/wiki/inc/phpseclib/Crypt_Base.php on line 915
Désolé, vous n'avez pas répondu correctement au test anti-spam. Peut-être n'êtes vous pas humain ?

I've unsuccessfully tried to find how to use this CAPTCHA plugin (or another one) also for the dokuwiki login page :(

Any hints? Thank you

After entering an incorrect captcha string, the red message saying that the input was wrong appears (as expected), but the underlying operation that should be protected with captcha (such as a login) succeeds (which is very wrong, making captcha de facto useless!).

This is 100% reproducible at my place and apparently independent of the browser used, or of the captcha mode.

Dokuwiki: 2015-08-10a "Detritus". Captcha newly reinstalled. PHP: 5.4.

I'm using the plugin for my contact form. I had the hope, to minimize spamming. At first, I used for chars, image, I have reconfigured this to 6 chars but with no success.

Around every hour a SPAM-Mail is generated. I have no idea, how they go around the captcha Protection!

All SPAM has the following content or similar:

Ihre Mailadresse 		 [[email protected]](mailto:[email protected])
Ihre Nachricht 		 Schauen Sie sich das neue Finanzinstrument an, das Sie reich machen kann. https://com.dkworld.de/gotodate/go

Is there a known way, to make the protection better?

Regards

I can't seem to get it to work. I've installed it into a couple of different dokoWiki's and it doesn't appear on the registration page:
http://wiki.synchro.net/?do=register
http://royalmaint.com/?do=register

Shouldn't the captcha be visible on these pages?

Thanks,

-Rob

DW Release: 2023-04-04 "Jack Jackrum"
Captcha Plugin Version: 2022-08-27

I recently updated to the latest dokuwiki/captcha-plugin version. After that I noticed, that the captcha plugin does not work anymore.

I am using it together with the bureaucracy-plugin. I am using a fixed phrase as captcha. It's possible to submit the form with the captcha field empty or putting anything wrong there.

PS: There is also already an issue open here.

To avoid DDOSing people with lost password mails, the CAPTCHA should integrate into the appropriate form as well.

In both Image+Audio and SVG+Audio, the audio text is completely different from the image text. The audio text is considered incorrect. Only the text in the image works.

If they are more than one formular on one web page, only the first captcha ist hidden from the user. Probably the JavaScript doesn't look for more than one formular.
demo: http://dokuwiki-genuin.informantum.de/doku.php?id=captcha-test
productive: http://www.pg-dus.de/newsletterabo

Warning: Undefined array key "REMOTE_USER" in /..../lib/plugins/captcha/action.php on line 197

dokuwiki/dokuwiki#3753 (comment)

if (!$this->getConf('forusers') &&$_SERVER['REMOTE_USER'] ) {

->
if (!$this->getConf('forusers') && array_key_exists('REMOTE_USER', $_SERVER) && !empty($_SERVER['REMOTE_USER'])) {

Since I upgrade to php8.1 I have these errors
Array and string offset access syntax with curly braces is no longer supported in /var/www/html/dokuwikiFM/dokuwiki-2022-06-26-Igor-RC2/lib/plugins/captcha/helper.php on line 285
Find in attach file a patch for that
captcha.helper.php.txt

http://earth.zen-do.ru
"Text prefilled with Javascript" was set.

1. Some user reported that, using Firefox, he wasn't able to register, always getting an error:
   "Sorry, but the CAPTCHA wasn't answered correctly. Maybe you're not human at all?"
2. I tried myself and could register.
   (FF 27.0.1 with NoScript, scripts for that site Allowed).

But when I tried to comment with Discussion plugin, I also got a message:
"Sorry, but the CAPTCHA wasn't answered correctly. Maybe you're not human at all?"

1. When I tried to use IE 9 (x64), CAPTCHA with Discussion also didn't work, the same way.

Hi,

if I got the documentation right, the captcha 'Text prefilled with Javascript' should be invisible to users if javascript is active.

In my installation it is visible but correctly filled with the captcha text.

Tested with:
DW: Adora Belle
Browser: FF 17.0.1 and Chromium 20.0.1132.47

cu,
ant-chaoz

Hi,
i am getting the warning:

Warning: Undefined array key "REMOTE_USER" in /{Path}/lib/plugins/captcha/action.php on line 190

on the login form with php 8.
I gues this is because $_SERVER['REMOTE_USER'] is not set for not logged in users.

PHP message: PHP Fatal error: Uncaught Error: Call to undefined function i magecreatetruecolor() in /doku/lib/plugins/captcha/helper.php:365

Hi, when I tried using captcha with bureacracy plugin, in Firefox (3.6.12) and Opera (10), I was not able to change input focus from one input field to another by any mean, except using [Shift]-[Tab], which is disturbing since I'm not able to explain my users, how to use keyboard instead of mouse :(.
Any help/idea will be very helpful!
This behavior does not happen with IE.

when this plugin is enabled in lemming, the toolbar (and the up/down arrows, etc) is broken.

but apart from that, it works well, and seems to help reduce forum spam

(yes, i shld probably update, but when something works i dont have time to fix it)

I's my plugin version too old?
I got "Fatal error: Array and string offset access syntax with curly braces is no longer supported in /var/www/main/lib/plugins/captcha/helper.php on line 285"
when I use PHP8.0.8.