starpeng / cool-php-captcha Goto Github PK
View Code? Open in Web Editor NEWAutomatically exported from code.google.com/p/cool-php-captcha
License: GNU General Public License v3.0
Automatically exported from code.google.com/p/cool-php-captcha
License: GNU General Public License v3.0
What steps will reproduce the problem?
1. when FreeType Version 2.3.7
What is the expected output? What do you see instead?
captcha image result just one letter
What version of the product are you using? On what operating system?
cool-php-captcha-0.2.1
Please provide any additional information below.
In FreeType Version 2.3.4, image show correctly
Original issue reported on code.google.com by [email protected]
on 30 May 2009 at 4:56
Attachments:
What steps will reproduce the problem?
I.
Only tested in Google chrome 2.0 and Opera 9.64.
1. Add some session variable incremented each time image is loaded.
2. Draw its value in debug mode.
3. Try refreshing page/captcha (1st, 2nd and both, several times).
II.
Fast refresh of page with captcha in example-form (check up will fail once
even with corrent answer).
What is the expected output? What do you see instead?
It looks like "captcha" session variable is refreshed after the image is
already drawn. That means that any attempt to enter the word from image
will fail.
What version of the product are you using? On what operating system?
cool-php-captcha-0.2.1 on windows XP SP3 (browsers and there listed above).
Please provide any additional information below.
Original issue reported on code.google.com by [email protected]
on 26 Jun 2009 at 6:38
What steps will reproduce the problem?
1. Filling out form here: http://fiercestreetnetworks.com/docs/contact.php
2. Submitting form will bring you to blank screen
3.
What is the expected output? What do you see instead?
Form validating, and forwarding user. Page just goes blank
What version of the product are you using? On what operating system?
Stable relase 0.3.1 / Ubuntu Linux 12.04
Please provide any additional information below.
Original issue reported on code.google.com by [email protected]
on 12 Jul 2012 at 11:53
What steps will reproduce the problem?
1. http://127.0.0.1/example-form.php?captcha=%3Cscript%3Ealert(1)%3C/script%3E
What is the expected output? What do you see instead?
filtered with htmlspcialchars()
What version of the product are you using? On what operating system?
0.2.1
Please provide any additional information below.
textbook xss.
Overall I think your captcha is quite secure and easy to implement. I like
the text manipluation and the random fonts. I recommend using randomly
generated answers over a list of words because possible guesses can be
compared to the list before making a real guess.
I am the Michael Brooks in this article:
http://www.forbes.com/2008/11/25/cyber-security-bots-tech-identity08-cx_ag_1125c
yberbots.html
peace
Original issue reported on code.google.com by [email protected]
on 31 Dec 2008 at 2:02
is needed to correct link with "Not readable? Change text."
you have no limit for reloading new image... that bad... very bad
my solution is ease
when create link to captha.php use ?tag=<ID>
$tag = md5(microtime(true));
and store it to $_SESSION['captcha'][$tag] = array('reload' => 0, 'text' =>
'right answer');
is needted to add <input type="hidden" name="captcha_tag" value=" $tag " /> to
form in example-form.php
when you try validate sent form you have excatly what captcha to use (you
cannot unset captcha of another page...ú
on reload update informacation ...['reaload']++ and chage right_answer
(it prevent change of answer for another page captcha)
if (...['reaload'] > 10) exit because of banned an show image that next iamge
is banned
do understand?
PS: there 4 bugs I found in 15 minutes after download :o)
Original issue reported on code.google.com by [email protected]
on 31 Aug 2010 at 6:01
when use a iframe in page A to include a form page B.
That form page B is using cool-php-captcha.
Problem happened using IE 7,8 to visit page A and submit it. The captcha in
session is empty but the submitted request is not. Even end user fresh the page
A, problem remains. Even user click change the captcha link, problem remains.
It works fine that visitor direct access page B or use firefox.
This happened in version 0.3. Not test 0.2.1 yet.
Original issue reported on code.google.com by [email protected]
on 26 Oct 2011 at 7:15
What steps will reproduce the problem?
1.
2.
3.
What is the expected output? What do you see instead?
What version of the product are you using? On what operating system?
Please provide any additional information below.
Original issue reported on code.google.com by [email protected]
on 25 Nov 2011 at 7:04
*What steps will reproduce the problem?
1. Include the Captcha image twice on a single page.
*What is the expected output? What do you see instead?
Each code should have it's own session code.
*What version of the product are you using? On what operating system?
0.3
*Please provide any additional information below.
I'd like to include the Captcha image more than once on a web page that uses
more than one form and each Captcha image have it's own code without it
interfering with the "secretword" session veriable from the other.
Can anyone tell me a simple way to do this, without having to use 2 different
versions of the captcha.php file?
Original issue reported on code.google.com by [email protected]
on 14 Jun 2011 at 3:00
Hi really nice library can you please submit to https://packagist.org/ where
you can find php's cool libraries through composer
Original issue reported on code.google.com by [email protected]
on 18 Jun 2013 at 8:06
What steps will reproduce the problem?
1. Deploy the application on PHP Version 5.3.10-1 ubuntu3.7
2. invoke example-form.php
3.
What is the expected output? What do you see instead?
Captcha text image is expected, instead a blank image is seen. The captcha text
is generated as confirmed from session captcha value when form is submitted. If
debug is enabled, the captcha can be seen at the image bottom also. However,
captcha image does not appear. It works once or twice in 20-30 attempts.
What version of the product are you using? On what operating system?
cool-php-captcha-0.3.1 on PHP Version 5.3.10-1 ubuntu3.7
GD version 2.0
Please provide any additional information below.
This product works perfectly on a windows platform. Attached file shows the
issue.
Original issue reported on code.google.com by [email protected]
on 18 Aug 2013 at 3:28
Attachments:
next bug is in multiply use
example I have to opened two pages in same computer
edit-post.php ... set captcha to session
in next tab of browser I have edit-article.php ... that overwrite captcha
session
so when submit form on edit-post.php ... result will be that captcha always
fail because $_SESSION['captcha'] contain captcha for edit-article.php
solution use $_SESSION['captcha'] = array()
on create captcha use $_SESSION['captcha'][] = 'new captcha';
after read unset by unset($_SESSION['captcha'][0]);
...
Original issue reported on code.google.com by [email protected]
on 31 Aug 2010 at 5:51
next bug in captcha.php
at function GetDictionaryCaptchaText(...
before fopen($wordsfile, 'r')
you must use
if (!file_exists($wordsfile)) return false;
because is here possible Warning output... that fails load an image
Original issue reported on code.google.com by [email protected]
on 31 Aug 2010 at 1:38
Fatal error: Call to undefined function imagettftext()
PLEASE resolve my this problem..
Original issue reported on code.google.com by [email protected]
on 10 Mar 2014 at 4:39
What steps will reproduce the problem?
1. Install cool captcha
2. Add code from example form to site
3. Load page and refresh
What is the expected output? What do you see instead?
There's a 5 letter minimum variable, but it seems it's not respected because
I'm getting 1 letter captchas 70% of the time
What version of the product are you using? On what operating system?
0.3 Windoes XP, mozilla firefox,
Please provide any additional information below.
Seems like a regular bug, there should be a simple fix or workaround to ensure
lengthysome codes.
Original issue reported on code.google.com by [email protected]
on 21 Sep 2010 at 9:02
session captcha and image captcha not same
Original issue reported on code.google.com by [email protected]
on 23 Oct 2013 at 7:14
public function __construct() {}
/**
* public function __construct(array $array = array()){
* $this->config($array);
* }
*/
public function config(array $array = array()){
if($array !== array()){
foreach($array as $key => $value){
if(property_exists(__CLASS__ , $key)){
$this->$key = $value;
}
}
}
}
Original issue reported on code.google.com by [email protected]
on 4 Oct 2010 at 9:23
What steps will reproduce the problem?
I tried changing the line around 287, from:
$this->im = imagecreatetruecolor($this->width*$this->scale, $this->height*$this->scale);
// Background color
$this->GdBgColor = imagecolorallocate($this->im,
$this->backgroundColor[0],
$this->backgroundColor[1],
$this->backgroundColor[2]
);
imagefilledrectangle($this->im, 0, 0, $this->width*$this->scale, $this->height*$this->scale, $this->GdBgColor);
to:
$this->im = imagecreatetruecolor($this->width*$this->scale, $this->height*$this->scale);
$color = $this->create_color($this->im, null, 0);
imagesavealpha($this->im, true);
// Set the blending mode to false, add the bgcolor, then switch it back.
imagealphablending($this->im, false);
imagefilledrectangle($this->im, 0, 0, $this->width, $this->height, $color);
imagealphablending($this->im, true);
What is the expected output? What do you see instead?
But I'm not getting anything good, background is either black, or captcha is
not beeings seen at all, I have tied different combos, but no luck :(
What version of the product are you using? On what operating system?
Version is 0.3, Linux, PHP 5.3
Thank you for your help !
Original issue reported on code.google.com by [email protected]
on 21 Mar 2011 at 7:05
next bug is in example-form.php
line 76 and followers: <img src="captcha.php" id="captcha" />
if example-form.php ... uses headers to force cache:
- Expires in future
- or Expires to current time
- or Cache-Control WITHOUT must-revalidate, post-check=0, pre-check=0
- or Pragma private or public
so when open example-form.php -> submit form -> i.e. to send-form.php and there
will found error in user data so show error and link with javascript
window.history.go(-1) ... or user self go back in browser
>> user will get back to example-form.php BUT this page WILL NOT BEEN
REQUESTED, BECAUSE IS CACHED and you get page with data that he writes
before... that OK
>> bug is in next step... WHEN USER SUBMIT FROM AGAIN...
-> captcha will be always SAME and always VALID becaus... cached page didn't
change captcha
-> captcha fails every time because... first execution of sent-form.php clear
previous captcha
solution exists request captcha.php by javascript:
script('type="text/javascript"');
var captchaAction = null;
function captcha() {
captchaDate = new Date;
if (captchaAction == null || captchaAction + 1000 < captchaDate.getTime()) {
// request new captcha code and ban old one
document.getElementById('captcha').src='captcha.php?'+Math.random();
}
captchaAction = captchaDate.getTime();
setTimeout('captcha()', 250);
}
timerID = setTimeout('captcha()', 250); <?php
</script>;
Original issue reported on code.google.com by [email protected]
on 31 Aug 2010 at 5:47
What steps will reproduce the problem?
1. Wait for spam bots to bust
What is the expected output? What do you see instead?
I expect no spam, instead I am still getting form submission with numbers as
the captcha instead of a valid captcha string.
Original issue reported on code.google.com by [email protected]
on 16 Oct 2012 at 9:38
What steps will reproduce the problem?
1. Open resources/words/en.php in any text editor.
2. Search for naughty or politically incorrect words, such as "titty",
"niggery", "sluttish" to name but a few.
3. Think about whether you want your website visitors to be confronted with
such terms as they complete a registration or contact form.
Original issue reported on code.google.com by [email protected]
on 13 Apr 2012 at 6:38
What steps will reproduce the problem?
1. png captch not wking
2.
3.
What is the expected output? What do you see instead?
What version of the product are you using? On what operating system?
Please provide any additional information below.
Original issue reported on code.google.com by [email protected]
on 14 Oct 2014 at 4:45
I suggest to check if $_SESSION['captcha'] is not empty. Because current
example allows surpassing captcha when both session and request variables
are empty.
So fixed example should be:
if (!$_SESSION['captcha'] || (strtolower(trim($_REQUEST['captcha'])) !=
$_SESSION['captcha'])) {
return "Invalid captcha";
}
Original issue reported on code.google.com by [email protected]
on 29 Oct 2009 at 11:09
next bug is in
example-form.php
line 86:
<input type="text" name="captcha" id="captcha-form" /><br/>
here is missing autocomplete="off"
<input type="text" name="captcha" id="captcha-form" autocomplete="off" /><br/>
to force browser never save history of previous submitted texts
Original issue reported on code.google.com by [email protected]
on 31 Aug 2010 at 8:07
What steps will reproduce the problem?
1. Installed PHP 5.3.0 (WAMP server)
2. Installed PHP 5.2.0 (WAMP server)
3. Installed cool-php-captcha
What is the expected output? What do you see instead?
With PHP5.2.0 it is working perfectly, but with PHP5.3.0 cpatcha image is not
generating.
What version of the product are you using? On what operating system?
0.3 version
Please provide any additional information below.
in page it appears as like a missed image..
Original issue reported on code.google.com by [email protected]
on 28 Jul 2011 at 6:56
Attachments:
in version 0.3 is problem with headers
example-form.php >>
line 81: document.getElementById('captcha').src='captcha.php?'+Math.random();
why did you use Math.random() ??? to prevent caching?
that bad way... correct way is remove this
document.getElementById('captcha').src='captcha.php';
and add to captcha.php
add line 471:
header('Date: Tue, 31 Aug 2010 05:27:21 GMT', true); // current time
header('Expires: Thu, 19 Nov 1981 08:52:00 GMT'); // time in past
header('Cache-Control: no-store, no-cache, must-revalidate, post-check=0,
pre-check=0');
header('Pragma: no-cache');
Original issue reported on code.google.com by [email protected]
on 31 Aug 2010 at 5:32
What steps will reproduce the problem?
1. session start function is misplaced.
you will receive a error
What is the expected output? What do you see instead?
Warning: session_start() [function.session-start]: Cannot send session
cache limiter - headers already sent (output started at example-form.php on
line 21
Invalid captcha
What version of the product are you using? On what operating system?
cool-php-captcha-0.2
Please provide any additional information below.
session start needs to be moved to line 1
example
<?php session_start(); ?>
I have attached a updated copy of example-form.php with the fix.
Original issue reported on code.google.com by [email protected]
on 22 Sep 2008 at 1:16
Attachments:
What steps will reproduce the problem?
1. not work with charset=utf-8 for captcha produce with string Arabic
2.
3.
What is the expected output? What do you see instead?
What version of the product are you using? On what operating system?
@version 0.3
Please provide any additional information below.
do this captcha can work with string Arabic
Original issue reported on code.google.com by [email protected]
on 29 Apr 2013 at 10:33
What steps will reproduce the problem?
1. Download the PHP Captcha files
2. Upload the files to a web server (such as http://localhost)
3. Open the example-form.php file, and see what happens..
What is the expected output? What do you see instead?
No captcha image at all.
What version of the product are you using? On what operating system?
0.3 on OS X 10.6.2.
Please provide any additional information below.
This issue can be addressed by (re)activating PHP and (re)installing GD
graphics on your web server.
Original issue reported on code.google.com by [email protected]
on 1 Apr 2012 at 6:50
Attachments:
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.