reCAPTCHA for SMF

[stonki]

Hello,

the problem was that we tried to include non Https websites into a https:// secured website,.

#diff GenericControls.template.php GenericControls.template.php.ORIG
316c316
<                                       src="https://api.recaptcha.net/challenge?k=';, $modSettings['recaptcha_public_key'], '">
---
>                                       src="http://api.recaptcha.net/challenge?k=';, $modSettings['recaptcha_public_key'], '">
320c320
<                                       <iframe src="https://api.recaptcha.net/noscript?k=';, $modSettings['recaptcha_public_key'], '"
---
>                                       <iframe src="http://api.recaptcha.net/noscript?k=';, $modSettings['recaptcha_public_key'], '"

[青山 素子]

stonki, thank you for the report. I've entered it as a bug and will look at ways to make it load the correct resource type based on how the website loads. It seems blocking was enabled in Chrome 21 and all newer builds, replacing the previous behavior of warning but still allowing.

[SD-X]

Does anyone know if this mod is still compatible with SMF 2.0.3? I'm assuming yes since it works fine in SMF 2.0.2, but the last version updated on the mod page lists SMF 2.0, so I'm being cautious about it.

[青山 素子]

It should work fine because of the very minor changes since 2.0 was released, but I haven't had a chance to confirm. Mostly this is because of heavy workload (and some long-standing personal/family issues) preventing development on the modifications for quite some time. Do a version emulate and if the install tests are good, it should be fine to install.

Do keep in mind the reported issue above about using this on an https-secured site/page.

Also, I suggest looking into using the built-in question/answer feature as it's currently a stronger anti-spam measure. The reCAPTCHA system has suffered numerous setbacks on effectiveness with current spamming tools being able to decode the images (or use pay services that have humans decode them).

[SD-X]

It should work fine because of the very minor changes since 2.0 was released, but I haven't had a chance to confirm. Mostly this is because of heavy workload (and some long-standing personal/family issues) preventing development on the modifications for quite some time. Do a version emulate and if the install tests are good, it should be fine to install.

Do keep in mind the reported issue above about using this on an https-secured site/page.

Also, I suggest looking into using the built-in question/answer feature as it's currently a stronger anti-spam measure. The reCAPTCHA system has suffered numerous setbacks on effectiveness with current spamming tools being able to decode the images (or use pay services that have humans decode them).

Thanks for your response man. If there's no known issues so far, then I'll probably install it.

I actually have several security mods installed that I use with this one. Although most bots can get past ReCaptcha now, it slows them down and stops the less-intelligent ones quite well. Coupling them together creates for a great setup.

[Mr. Pedram]

Hey guys,
in RTL pages, it shown really bad, i did some change in CSS but nothing change, anyone know how can i fix this for RTL pages?

Screen shot:



Thanks

[inter]

hi

my corrections to it a mode
there is an error
I offer:

Find: Subs-Editor.php

Code Select Expand


if (!$resp->is_valid)
fatal_lang_error('error_wrong_verification_code', false);
}
else
fatal_lang_error('error_wrong_verification_code', false);


Replace:

Code Select Expand


if (!$resp->is_valid)
{
$verification_errors[] = 'wrong_verification_code';
//fatal_lang_error('error_wrong_verification_code', false);
}
}
else
{
$verification_errors[] = 'wrong_verification_code';
//fatal_lang_error('error_wrong_verification_code', false);
}


Thanks.

[Shadowwolf_tw]

If anyone is running their forum over SSL, you're going to have issues with this mod as-is if anyone uses v22+ of Chrome to view your site and set up an account.

Also, Google changed the ReCaptcha API around a bit so the include code for the template page needs to be updated. The old stuff still works as I write this, but who knows for how long.

Install this mod as is, but then modify the ./Themes/default/GenericControls.template.php

Find

Code (php) Select Expand

http://api.recaptcha.net/challenge?k=
Replace with:

Code (php) Select Expand

http://www.google.com/recaptcha/api/challenge?k=

Find:

Code (php) Select Expand

http://api.recaptcha.net/noscript?k=
Replace With:

Code (php) Select Expand

http://www.google.com/recaptcha/api/noscript?k=

We ran into this when trying to make the include script SSL compatible. The old API calls with the embed were invalid because Google changed the web address for the calls.

If you force SSL like we do, just change the "http://" to "https://" and Chrome will load the embed like it should. Otherwise Chrome users won't see the ReCaptcha form and wont be able to validate properly.

Users can tell Chrome to load "unsecure content" but most of you web admins out there know that most users arent going to be savvy enough to do that on their own.

[oOo--STAR--oOo]

Hey I can't seem to get this to work.

I installed fine but when trying to register I get this error.
You are not allowed to access this section.

I am not sure what is causing this problem..
This mod really need updating to work as it is a much needed mod for SMF as spam bots and add bots can easily get through the questions and captcha offered by SMF..

Does anyone know why it is producing this error when trying to sign up and how to combat it?

[青山 素子]

Register for reCAPTCHA or on the SMF forum?

reCAPTCHA has long been broken, so it isn't much help. I suggest using the built-in question and answer feature of SMF 2.

Also, yes, I know the modification needs some review, I just haven't had time.

[oOo--STAR--oOo]

Register for reCAPTCHA or on the SMF forum?

reCAPTCHA has long been broken, so it isn't much help. I suggest using the built-in question and answer feature of SMF 2.

Also, yes, I know the modification needs some review, I just haven't had time.

The question and answer feature does not work.. They can even do maths.. here is a question I had 4+6-2 = ?
Its cool anyway.. I found something to stop bots. recaptcha is the only captcha system that works..
Its recommended by MANY,.. I suggest if you can't update the mod, offer it to someone who can.

Because its needed badly..
Thanks.

[Arantor]

Sure it does if you write good questions. Math questions are easy, they'll just search Google for the answer.

What you need to do, as has been said in plenty of other places, is write questions that are about what your forum is about, that potential users would be likely to know but not bots or casual outsiders.

Don't blame the feature for not working when you don't use it properly.

[oOo--STAR--oOo]

Sure it does if you write good questions. Math questions are easy, they'll just search Google for the answer.

What you need to do, as has been said in plenty of other places, is write questions that are about what your forum is about, that potential users would be likely to know but not bots or casual outsiders.

Don't blame the feature for not working when you don't use it properly.

That makes sense, but some people are just not that clever and because they are that new to the platform, there really isn't a question you can give them.

This mod needs to be updated or built into SMF its self.. As the one SMF offers doesn't work.

[Arantor]

No, it doesn't. As people who use other platforms have discovered, reCAPTCHA is rather vulnerable these days.

If you're looking for a magic bullet, there isn't one.

[Herman's Mixen]

well i'll use the solved media capthca typ-in with the 3 API's and works fine out of the box, reduced spammers to nihil

plugins

register at their site and get the 3 API's

http://www.solvemedia.com/security

[babalola olasehinde]

i install this mod successfully in my forum 2.0.4 , and after that it brought out an error on the header of the forum.
pls see screenshot

what can i do

[SD-X]

i install this mod successfully in my forum 2.0.4 , and after that it brought out an error on the header of the forum.
pls see screenshot

what can i do

It looks like you either have another mod conflicting with it, or something went wrong in the install. Do you have any other mods installed?

[babalola olasehinde]

i install this mod successfully in my forum 2.0.4 , and after that it brought out an error on the header of the forum.
pls see screenshot

what can i do

It looks like you either have another mod conflicting with it, or something went wrong in the install. Do you have any other mods installed?

i have only Anti Bot: Are You Human/Bot? installed

[SD-X]

i install this mod successfully in my forum 2.0.4 , and after that it brought out an error on the header of the forum.
pls see screenshot

what can i do

It looks like you either have another mod conflicting with it, or something went wrong in the install. Do you have any other mods installed?

i have only Anti Bot: Are You Human/Bot? installed

Hmm...not sure of any conflicts there. What SMF version is your theme running at?

[babalola olasehinde]

i install this mod successfully in my forum 2.0.4 , and after that it brought out an error on the header of the forum.
pls see screenshot

what can i do

It looks like you either have another mod conflicting with it, or something went wrong in the install. Do you have any other mods installed?

i have only Anti Bot: Are You Human/Bot? installed

Hmm...not sure of any conflicts there. What SMF version is your theme running at?

smf 2.0.4