Captcha

[TriTop]

Hi community, hi ZiNgA BuRgA

Many users have problems to read the captcha code correctly. My idea is to replace the captcha with a simple question. Based on maths. Something like

   

All of you have a nice weekend!

Greetings - TriTop

[Pirata Nervo]

-LeX made a plugin called Extra Security I think which lets you do that

[Shemo]

Yep, he did.  I have the file if you need it.

[TriTop]

That sounds great. Please load up the plugin or tell me were I can get it. Thanks in advance.

[Pirata Nervo]

Lex's forum is closed so you may want to search for:
Extra Safety Check While Registering

[TriTop]

OK, I found it (see attachment)
It only works on registration. Nice it will be work on posting to. I dont know much about php, so I cant do it myself. Someone of you can modify the plugin to do that?

Best regards
TriTop

[ZiNgA BuRgA]

^ That's an interesting mod - just a shame that it's somewhat useless, as it would take a bot coder about 10 seconds to break that...

With the MyBB CAPTCHA, I've found that reducing the rotation seems to make it much easier to read.  Do you really want to ditch CAPTCHA?

[TriTop]

(04-16-2008 01:09 PM)ZiNgA BuRgA Wrote:  ^ That's an interesting mod - just a shame that it's somewhat useless, as it would take a bot coder about 10 seconds to break that...

Oh...OK. Then it is not that I wanna use.

(04-16-2008 01:09 PM)ZiNgA BuRgA Wrote:  With the MyBB CAPTCHA, I've found that reducing the rotation seems to make it much easier to read.

Great! Thats it. I reduced $min_angle and $max_angle in captcha.php to 5.  

(04-16-2008 01:09 PM)ZiNgA BuRgA Wrote:  Do you really want to ditch CAPTCHA?

No. Now this is not necessary (thanks to your tip) any more.

Have a nice day
Best regards
TriTop

[Pirata Nervo]

that plugin was to be used with CAPTCHA so bots need to find the correct answer too

[ZiNgA BuRgA]

(04-16-2008 05:34 PM)Pirata Nervo Wrote:  that plugin was to be used with CAPTCHA so bots need to find the correct answer too

No, bots don't need to find the correct answer because the plugin uses a static link between IDs and answers, meaning that all the bot coder has to do is put ONE answer in (and forge the question ID), and the whole script is rendered useless (except for annoying legit users).

There are also flaws in the entire design of these "question protections" (ie, how many questions are you willing to write up?).