kestas.kuliukas.com

EasyCaptcha.php, for phpBB 2/3

What it is

An improved captcha for phpBB 2 and 3, which is easy to install and blocks spammers effectively.

How it works

EasyCaptcha is a simple, portable captcha which is easy to add in anywhere a captcha is needed. This page is a guide to installing it in the common places it's needed (you don't need to know about EasyCaptcha to install and use it).

Features/What sets it apart

• Hasn't been broken by spammers, like phpBB's official captcha
• No database or file storage space needed (which means easier installation and less potential for security issues)
• Easy install: Just copy the captcha folder over and edit a single phpBB file
• Has guides for phpBB 2 and 3 installation, but same simple technique can be used in any code
• Fits right into whatever it installs into; doesn't need its own pages/forms

Live installations: HITB forum and phpDip developers.

Installing

• Download the files here, and extract the files.
• Open EasyCaptcha/easycaptcha.php and replace "OASDOIJQWOIJDASDOI" with your own random secret code.
• Upload the EasyCaptcha folder to your web server.
• Check that EasyCaptcha/easycaptcha.php is working, displaying captcha images.
• Either:
  • ... install it into phpBB2 or phpBB3 using the guides below,
  • ... or install it into custom code (your code, a different forum, whatever) using the technique used on the EasyCaptcha page and in the guides below.

phpBB2

• Open usercp_register.php
• Add the image:
  • Find:
    if (!empty($board_config['enable_confirm']) && $mode == 'register') { [...] }
  • Replace:
    if (!empty($board_config['enable_confirm']) && $mode == 'register') { $confirm_image = '<img src="captcha/easycaptcha.php" />'; $template->assign_block_vars('switch_confirm', array()); }
• Add the code check:
  • Find:
    if ($board_config['enable_confirm'] && $mode == 'register') { [...] }
  • Replace:
    if ($board_config['enable_confirm'] && $mode == 'register') { if (empty($HTTP_POST_VARS['confirm_code'])) { $error = TRUE; $error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['Confirm_code_wrong']; } else { $confirm_code = htmlspecialchars($HTTP_POST_VARS['confirm_code']); if (!preg_match('/^[A-Za-z0-9]+$/', $confirm_code)) { $confirm_code = ''; } if ( isset($_COOKIE['Captcha']) ) { list($Hash, $Time) = explode('.', $_COOKIE['Captcha']); if ( md5("OASDOIJQWOIJDASDOI".$confirm_code.$_SERVER['REMOTE_ADDR'].$Time) != $Hash ) { $error = TRUE; $error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['Confirm_code_wrong']; } elseif( (time() - 5*60) > $Time) { $error = TRUE; $error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . 'Captcha code is only valid for 5 minutes. '; } } else { message_die(GENERAL_MESSAGE, "Captcha cookie not present. ", '', __LINE__, __FILE__); } } }
  • Replace "OASDOIJQWOIJDASDOI" in the code you just added with the secret code you entered into EasyCaptcha/easycaptcha.php earlier.
• Test out registering a new account to see if everything is working.
• All done!

phpBB3

Warning! phpBB3's captcha system significantly changed in phpBB 3.0.6; the instructions below will not work on phpBB 3.0.6+.
In phpB 3.0.6+ there is a built in captcha module system, which allows a series of decent captcha options to choose from. I have gone with reCaptcha, since it is the easiest to set up (it uses the same principal as EasyCaptcha, with the added bonus that Google hosts it, and it comes with phpBB, which makes the guide below obsolete for any version of phpBB above 3.0.6.

• Open includes/ucp/ucp_register.php
• Add the image:
  • Find:
    $confirm_image = '[...]';
  • Replace:
    $confirm_image = '<img src="EasyCaptcha/easycaptcha.php" />';
• Add the code check:
  • Find:
    $wrong_confirm = false; if ($config['enable_confirm']) { [...] }
  • Replace:
    $wrong_confirm = false; if ($config['enable_confirm']) { $confirm_code = $data['confirm_code']; if ( isset($_COOKIE['Captcha']) ) { list($Hash, $Time) = explode('.', $_COOKIE['Captcha']); if ( md5("OASDOIJQWOIJDASDOI".$confirm_code.$_SERVER['REMOTE_ADDR'].$Time) != $Hash ) { $error[] = $user->lang['CONFIRM_CODE_WRONG']; $wrong_confirm=true; } elseif( (time() - 5*60) > $Time) { $error[] = 'Captcha code is only valid for 5 minutes. '; $wrong_confirm=true; } } else { $error[] = $user->lang['CONFIRM_CODE_WRONG']; $wrong_confirm=true; } }
  • Replace "OASDOIJQWOIJDASDOI" in the code you just added with the secret code you entered into EasyCaptcha/easycaptcha.php earlier.
• Delete everything in phpBB's cache folder, so you see the effects of the new code.
• Test out registering see if everything is working.
• All done!