Captcha using TTF & GD

[Jeffey]

Woody!,
Sending you a message as well to make sure you take notice as this might be the solution.

In frustration I started to read this whole thread yet again and came across a post by babygekko.

First post about "glob" didn't work for me but in trying combinations I got it to work (at least more than once, time and continued tests will tell if I'm truly ready to go) on my end.

All I did was:
"...I also had to delete the ob_start() and ob_end_clean() from captcha_img.php. Things work out perfectly right after that." - thanks babygekko!

Give it a shot!

[Jeffey]

Sorry dude, in my excitement I didn't read the next post which was yours, looks like you tried that already.

Hopefully this will help others, mine now appears to work even with additional drop down subject line for contact_us page.

[Woodymon]

Sorry dude, in my excitement I didn't read the next post which was yours, looks like you tried that already.

Hopefully this will help others, mine now appears to work even with additional drop down subject line for contact_us page.

Hey jeffey,

Thanks for the follow-up and the PM. Well I tried the suggestion again and it indeed works on the test version:

<?php
/**
 * @version $Id: captcha_img.php v 2.5 23.03.2007 13:11 AndrewBerezin $
 */

// ob_start();
require('includes/application_top.php');
// ob_end_clean();

require(DIR_WS_CLASSES . 'captcha.php');
$captcha = new captcha();

$captcha->generateCaptcha();
?>

I may be wrong but I had understood Andrew repaired this issue in latest mod version and stated that ob_start() and ob_end_clean() were required for security reasons?

Andrew, is this the case? Or is it ok to comment out those two functions?

What's strange to me is that on one account the test version WITHOUT the two lines having commented out, displays the captcha image. But on another account on the exact same host machine, the image will not display without the the two lines above commented out.

I did a google search on "ob_start php" and see lots of issues posted.

Ideas anyone?

Woody

[Jeffey]

$#*##&$***!

I have the same information in my copy (with two pieces I took out missing of course) so it looks like the most recent version.

What is the nature of the security risk?

Everything is working now and I haven't found another mentioned workaround after this was posted by babygekko.

Gotta be better than nothing and given no help has surfaced with all of our posts I think I will be forced to us this as is. Don't know what else to do, it's either that or trash the project.

[a_berezin]

Use old contribution - http://www.zen-cart.com/index.php?ma...roducts_id=325.

[Woodymon]

What is the nature of the security risk?

I may have misspoke and Andrew has not commented regards to the real need for:

ob_start();
- AND -
ob_end_clean();

In the mean time I also have commented out those two lines and the captcha image is now displaying where it did not before. But don't ask me why as I'm no PHP guru.

Maybe Andrew can fill us in on the purpose/need of those two lines, within the context of the operation of his mod and why those two entries might cause the captcha image to not display.

I'm still trying to wrap my head around application_top.

Thanks again to Andrew for supplying this mod.

Woody

[Jeffey]

Second the thanks to Andrew! Despite this hiccup the mod is a great one.

As to a_berezin's comment, thanks. Problem is that the old mod just doesn't provide as much coverage as this mod in addition to making it more readable which, at least for me, has always been my biggest complaint with this feature on any site. Plus, I removed it once, it ain't going back!

Hopefully your mistaken Woody and/or Andrew will pick this up and let us know the potential implications or a slight modification.

Until I hear otherwise I'm following suit with Woody and running without those two lines.

Thanks again to Woody for noodling this through with me and everyone else for the contributions to the thread which eventually lead me to my "solution".

[a_berezin]

I regret, but I have lost interest to this.

[Jeffey]

I hope you've only lost interest in us (who would blame you?) and not the mod!!

[a_berezin]

Not in you. In this and other mods.

This mod you can download from DL-area.

P.S. I think it is not necessary to discuss it