phpmyfaq 160

jazcyk · Post by **jazcyk** » Sat Mar 11, 2006 5:18 pm

does like 4.3.11.

this GD library is that a 'loadable extension' ??
that could very well explain!

Post by **Thorsten** » Sat Mar 11, 2006 5:20 pm

Hi,

you have to enable it in your php.ini file.

I'll add a check for an enabled GD library in the install script.

bye
Thorsten

jazcyk · Post by **jazcyk** » Sat Mar 11, 2006 5:22 pm

captchas display OK if the gd2.dll is loaded at Apache startup!
I dont have more time right now, but looks like taht was it.

I'll check everything tomorow or monday!

Post by **Thorsten** » Sat Mar 11, 2006 5:24 pm

Hi,

great!

Thanks for testing!

bye
Thorsten

jazcyk · Post by **jazcyk** » Sat Mar 11, 2006 6:45 pm

User entries work now perfectly as we fixed the php config thing on my system. Every issue that I had with the alpha release is fixed. Also the database issues (solutionID numbering etc). I simply can't find any issues.

With that I don't think there is much reason for maintaining 1.5.x anymore. Release 1.5.8 with the latest fixes from CVS and let that be the last 1.5.x. 1.6 can go out of BETA after a week or two I guess. Concentrate on 1.6 and 2.0.

But I would like to see the bad words lists available from Admin Panel like banned ip's are! But Holy Cow! Now we can block dirty words like 'phpmyadmin' from our faq

...

Actually I am quite impressed by the captcha's They look like being very difficult to break by a robot, and still I did not have a single one, that I could not solve.

Post by **Thorsten** » Sat Mar 11, 2006 6:59 pm

Hi,

well, the next 1.6 release will be a RC, the release candidate. I think it will be out at the end of March. In April we'll see the light of 1.5.8 and hopefully 1.6.0 final. The 1.6 branch will be the stable branch and the 1.5 branch will only get security related releases until the end of this year.

After releasing 1.6 we'll port all new 1.5 and 1.6 features into 2.0 and try to get out an alpha version the next months...

Thanks again for testing!

bye
Thorsten

benzo · Post by **benzo** » Sat Mar 11, 2006 9:40 pm

Where I can see 1.6.0 beta in action?

Thanks.

Post by **Thorsten** » Sat Mar 11, 2006 9:42 pm

Hi,

there's no demo out there. Just install it.

bye
Thorsten

matteo · Post by **matteo** » Sun Mar 12, 2006 10:46 am

jazcyk wrote:Actually I am quite impressed by the captcha's They look like being very difficult to break by a robot, and still I did not have a single one, that I could not solve.

Hi jazcyk,
I drop a note hoping this will be useful for you. Please, look at the table faqcaptcha, you'll see how we're trying to identify an anonymous user. During normal use this table would be empty, on average: each record is created when a captcha image is showed to the user and deleted upon a successful matching, so, on average, a record in this table is probably linked to a spam attack. Currently we don't perform any garbaging of old records because these data could be used as a database for collecting ip addresses, eventually organize them in subnetwork addresses, in order to use them as an input for PMF IP banning. As you can see in the code we perform these 3 checks on public forms:

1. Check against IP/Network address
2. Check against banned words
3. Check against the captcha code

so you can ban those users at the address level (1.).

jazcyk · Post by **jazcyk** » Sun Mar 12, 2006 1:42 pm

Is this captcha class open source/free to use?

Actually we are bothered right now by a robot attempting code injection in a dynamically created PHP page at our website. Happens 1-2 times per week lately and a few times she (!) has had the luck to make our download page inoperable for a few hours until one of us found out.

Post by **Thorsten** » Sun Mar 12, 2006 1:47 pm

Hi,

jazcyk wrote:Is this captcha class open source/free to use?

sure. It's free and open source like the rest of phpMyFAQ.

bye
Thorsten

jazcyk · Post by **jazcyk** » Sun Mar 12, 2006 1:51 pm

what files will we need to implement it then?

Post by **Thorsten** » Sun Mar 12, 2006 1:53 pm

Hi,

you need in the directory inc/:

- captcha.php: the main captcha class
- db.php: the database factory
- mysql(i).php: our database abstraction layer

As an example how to use it, just look into add.php and save.php.

bye
Thorsten

jazcyk · Post by **jazcyk** » Mon Mar 13, 2006 2:54 pm

I'll look into that. We might decide to use it without the database ...

But I think I have a small issue. It might not be a new 1.6 thing!

If you delete a PROPOSED entry, it is still displayed as existent. Next you try to delete it displays 'entry was deleted'. I think the list of entries to 'approve' should update when something is deleted from here.

Post by **Thorsten** » Mon Mar 13, 2006 3:01 pm

Hi,

I will take a look at it.

bye
Thorsten

phpMyFAQ

phpmyfaq 160

and 4.4.2

think that was it ...

Everything works fine!

A note on a possible use of captcha table records

captcha

Re: captcha

thanks

thanks ..