Captcha using TTF & GD

[Sevenhelmets]

Ive had Captcha installed for a while now and had noticed on my localhost windoze test machine that I often got an 'incorrect validation code message' for several attempts, even tho the code entered was correct. I have now had complaints from customers that they cannot log in due to the same problem on my Live site.
Ive now disabled CAPTCHA but getting the spambots again.
Any explanation why it works intermittently?

Yep just installed this, and it's happening to me too. Absolutely no idea why, and it would appear Andrew hasn't been checking this forum for a while.

In the interm I've turned it off. Luckily I only need it for the "non user review" page mod, and I can still filter at the admin level for spam, so it's not a biggie.

[johnchazz]

Love this Mod. Running Zen-Cart v1.3.8a with no mod to the Contact Us form. Followed instructions exactly. Works great, with one problem:

In IE8, box is LEFT-justified under "Security Check:".

In Firefox 3.6, box is RIGHT-justified on same line as "Security Check:"

You can see this if you go to my site (using Firefox) at:
http://flairbyjdn.com/catalog/index....age=contact_us

Anyone else have this same problem? If you're only using IE, I would check your site with Firefox just to be sure you aren't experiencing the same problem I am.

Any ideas?

[johnchazz]

Ignore my replay above - posted to wrong thread by mistake. Argh.

[Donn]

Hi. I am using ZC 1.3.8A, with a number of mods, including Captha.

Everything worked fine, until I changed some .htaccess parameters.

I know it's only because of the changes I had made, as when I replace with the old .htaccess file, the Captcha again works 100%.

The .htaccess changes are needed. t I made many changes, however, and I'm wondering if anyone can steer me in the right direction, as far as which change, specifically, did this.


Nothing else on my cart, or the server, seems affected in any kind of negative way by the new .htaccess file.

When using my new .htaccess parameters, instead of displaying the Captcha image, I only see 'Enable This Picture' where the Captcha image should be, and the redraw button at right.

Clicking on that, it looks like the image will be drawn, it shows a rectangle the size of the Captcha block really fast, but then again reverts to the 'Enable This Picture' text.

What I seem to need to find out: How is the Catchpa image generated, as clearly I've disable the ability to do so on my server.

[Donn]

As stated prevoiously...Hi. I am using ZC 1.3.8A, with a number of mods, including Captha.

Everything worked fine, until I changed some .htaccess parameters.

I know it's only because of the changes I had made, as when I replace with the old .htaccess file, the Captcha again works 100%.
.......
When using my new .htaccess parameters, instead of displaying the Captcha image, I only see 'Enable This Picture' where the Captcha image should be, and the redraw button at right.

Clicking on that, it looks like the image will be drawn, it shows a rectangle the size of the Captcha block really fast, but then again reverts to the 'Enable This Picture' text.

What I seem to need to find out: How is the Catchpa image generated, as clearly I've disable the ability to do so on my server.

OK; it was probably a bad idea to leave the cart like that for ANY period of time, but we were concerned about hacks, and in the meantime while securing the site, if someone couldn't log on, then that was OK. Now, I've removed the .htaccess code, and the Captcha STILL isn't working!!!!!!!!!!!!!!!

It's failing as it had been previously, with the new .htaccess changes. I KNOW that removing the new .htaccess code had fixed it instantaneously when I was messing with this, as I even posted that on this thread. (Just in case I am unsure, if I posted it ,I'm certain it was the case!) But now...it's seemingly stuck.

Can any .htaccess parameters stay in effect even after the .htaccess commands are removed???

I'm going to see if it was any of the suggested patches and security upgrades on this board that I installed. It doesn't make sense that it could be that, as changing the .htaccess file from new to old made the Catchpa work and then not work each and every time I tested before leaving the new settings in place.

[Donn]

Running captcha_test.php as a stand-alone PHP file, still the Catchpa image doesn't display. Same as when it's generated on the cart. What does that tell me?? Does that mean it IS a server issue? All files are intact and remain in place; none have any added file length or show a recent modified date.

When I run captcha_debug.php, I get this message:


Headers already sent in ******/includes/extra_configures/pci_patch_v13x_search.php on line 15 Warning: Cannot modify header information - headers already sent by (output started at *****/includes/extra_configures/pci_patch_v13x_search.php:15) in **********/includes/classes/captcha.php on line 288

Is this possibly because of the patch I applied, and NOT the .htaccess adjustment I had made, as I had thought earlier?
Any help would be greatly appreciated.........

[Donn]

When I run captcha_debug.php, I get this message:


Headers already sent in ******/includes/extra_configures/pci_patch_v13x_search.php on line 15 Warning: Cannot modify header information - headers already sent by (output started at *****/includes/extra_configures/pci_patch_v13x_search.php:15) in **********/includes/classes/captcha.php on line 288

The below code from each of the two files returned in the error message is listed below. So far, I haven't figured anything out on my own with regard to this issue. Does anyone know anything about the patch, and why this might be happening? I don't see the identical commands, but then I'm only a PHP novice, and I'm not familiar with a lot.

Line 287- **********/includes/classes/captcha.php

 if($this->debug) {
      header('Content-Type: text/html');
    } else {
      @header('Content-Transfer-Encoding: binary');
      @header('Content-Disposition:attachment; filename=captcha_img.' . $this->img_type);
      @header('Content-Type: image/' . $this->img_type);
    }

Line 15 ****/includes/extra_configures/pci_patch_v13x_search.php

<?php
if (isset($_GET['keyword']) && $_GET['keyword'] != '')
{
  $count =  substr_count($_GET['keyword'], '"');
  if ($count == 1)
  {
    if(substr(stripslashes(trim($_GET['keyword'])), 0, 1) == '"')
    {
      $_GET['keyword'] .= '"';
    }
  }
  $_GET['keyword'] = stripslashes($_GET['keyword']);
}

[jolion]

Hi,

I hope that someone can give me a helping hand. I have installed the captcha and as far as I've checked it works fine except for the contact us page. When a costumer has forgotten to fill in a field or make a mistake in i.e. the captcha code the page load again with the error messages. But the inquiry field returns emty so the user must type again his message.

I search on the internet for sites with contact page using the captcha and test to see what happen but my problem didn't show there.

I use the original files and have no modifications made to it.

Hope there is somebody out there who can give me a solution.

Thank you in advance!

[tony_sar]

Hi,

I hope that someone can give me a helping hand. I have installed the captcha and as far as I've checked it works fine except for the contact us page. When a costumer has forgotten to fill in a field or make a mistake in i.e. the captcha code the page load again with the error messages. But the inquiry field returns emty so the user must type again his message.

I search on the internet for sites with contact page using the captcha and test to see what happen but my problem didn't show there.

I use the original files and have no modifications made to it.

Hope there is somebody out there who can give me a solution.

Thank you in advance!

take a look at this bug report ..

http://www.zen-cart.com/forum/showthread.php?t=155522