kestas.kuliukas.com

EasyCaptcha.php, for phpBB 2/3

What it is

An improved captcha for phpBB 2 and 3, which is easy to install and blocks spammers effectively.

How it works

EasyCaptcha is a simple, portable captcha which is easy to add in anywhere a captcha is needed. This page is a guide to installing it in the common places it's needed (you don't need to know about EasyCaptcha to install and use it).

Features/What sets it apart

• Hasn't been broken by spammers, like phpBB's official captcha
• No database or file storage space needed (which means easier installation and less potential for security issues)
• Easy install: Just copy the captcha folder over and edit a single phpBB file
• Has guides for phpBB 2 and 3 installation, but same simple technique can be used in any code
• Fits right into whatever it installs into; doesn't need its own pages/forms

Live installations: HITB forum and phpDip developers.

Installing

• Download the files here, and extract the files.
• Open EasyCaptcha/easycaptcha.php and replace "OASDOIJQWOIJDASDOI" with your own random secret code.
• Upload the EasyCaptcha folder to your web server.
• Check that EasyCaptcha/easycaptcha.php is working, displaying captcha images.
• Either:
  • ... install it into phpBB2 or phpBB3 using the guides below,
  • ... or install it into custom code (your code, a different forum, whatever) using the technique used on the EasyCaptcha page and in the guides below.

phpBB2

• Open usercp_register.php
• Add the image:
  • Find:
    if (!empty($board_config['enable_confirm']) && $mode == 'register') { [...] }
  • Replace:
    if (!empty($board_config['enable_confirm']) && $mode == 'register') { $confirm_image = '<img src="captcha/easycaptcha.php" />'; $template->assign_block_vars('switch_confirm', array()); }
• Add the code check:
  • Find:
    if ($board_config['enable_confirm'] && $mode == 'register') { [...] }
  • Replace:
    if ($board_config['enable_confirm'] && $mode == 'register') { if (empty($HTTP_POST_VARS['confirm_code'])) { $error = TRUE; $error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['Confirm_code_wrong']; } else { $confirm_code = htmlspecialchars($HTTP_POST_VARS['confirm_code']); if (!preg_match('/^[A-Za-z0-9]+$/', $confirm_code)) { $confirm_code = ''; } if ( isset($_COOKIE['Captcha']) ) { list($Hash, $Time) = explode('.', $_COOKIE['Captcha']); if ( md5("OASDOIJQWOIJDASDOI".$confirm_code.$_SERVER['REMOTE_ADDR'].$Time) != $Hash ) { $error = TRUE; $error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['Confirm_code_wrong']; } elseif( (time() - 5*60) > $Time) { $error = TRUE; $error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . 'Captcha code is only valid for 5 minutes. '; } } else { message_die(GENERAL_MESSAGE, "Captcha cookie not present. ", '', __LINE__, __FILE__); } } }
  • Replace "OASDOIJQWOIJDASDOI" in the code you just added with the secret code you entered into EasyCaptcha/easycaptcha.php earlier.
• Test out registering a new account to see if everything is working.
• All done!

phpBB3

• Open includes/ucp/ucp_register.php
• Add the image:
  • Find:
    $confirm_image = '[...]';
  • Replace:
    $confirm_image = '<img src="EasyCaptcha/easycaptcha.php" />';
• Add the code check:
  • Find:
    $wrong_confirm = false; if ($config['enable_confirm']) { [...] }
  • Replace:
    $wrong_confirm = false; if ($config['enable_confirm']) { $confirm_code = $data['confirm_code']; if ( isset($_COOKIE['Captcha']) ) { list($Hash, $Time) = explode('.', $_COOKIE['Captcha']); if ( md5("OASDOIJQWOIJDASDOI".$confirm_code.$_SERVER['REMOTE_ADDR'].$Time) != $Hash ) { $error[] = $user->lang['CONFIRM_CODE_WRONG']; $wrong_confirm=true; } elseif( (time() - 5*60) > $Time) { $error[] = 'Captcha code is only valid for 5 minutes. '; $wrong_confirm=true; } } else { $error[] = $user->lang['CONFIRM_CODE_WRONG']; $wrong_confirm=true; } }
  • Replace "OASDOIJQWOIJDASDOI" in the code you just added with the secret code you entered into EasyCaptcha/easycaptcha.php earlier.
• Delete everything in phpBB's cache folder, so you see the effects of the new code.
• Test out registering see if everything is working.
• All done!