Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[bikoz]

The new version of MATH CAPTCHA (adapted from 1.7) for version 1.6 DOES NOT work. The checkMathCaptcha() function is defined but is NOT USED anywhere in the code.

We need to change lines 322, 639 and 859 (relative to latest 1.6 download version):

Replace mathCaptcha($_POST['calc'], $_POST['sum'])
with  checkMathCaptcha($_POST['calc'], $_POST['sum'])

In addition, we need to change the function definition at line 1977:

function checkMathCaptcha($inSum = '', $inCalc = '') {

should become:
function checkMathCaptcha($inCalc = '', $inSum = '') {

Hope this helps...

Please let me know if I'm wrong.

[bikoz]

If you want to konw if your 1.6 code is affected by the bug, you can test the captcha with any unlikely number, say 123 or 999. By the way, you can even test with letters...

If such values work, you know the drill!

But don't panic: there no security threat. Only the CAPTCHA itself is affected.

[Keyrocks]

If you want to konw if your 1.6 code is affected by the bug, you can test the captcha with any unlikely number, say 123 or 999. By the way, you can even test with letters... If such values work, you know the drill! ......... But don't panic: there is no security threat. Only the CAPTCHA itself is affected.

@ Bikoz... thanks. Actually, while testing this I noticed you could also leave the captcha field empty and still proceed. I've patched the official download ZIP with this patch today.

[Rui Mendes]

You're right bikoz.

The official version contains 2 versions, one is correct and other is not correct like you report.

We will correct this fast.

Thanks

[Keyrocks]

You're right bikoz. - We will correct this fast. Thanks

It's already done Rui Mendes... (and Bikoz's post is a couple months old).