Better Veriword Captcha Display

[Guest]

Welcome, Guest. Please login or register.
Did you miss your activation email?

1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[devtrench]

I really like MODx I especially like how accessible the core code is when you want to make a modification.  One of the things that really bugged me about MODx is how the Veriword Captcha is displayed - both the look of it and the default words used for the captcha.  I really didn't want my clients having to type in words like Zygote,BitCode,MODx,etc.  I just wanted a 'normal' looking captcha with random characters.   So I modified the veriword script to output what I think looks nice, and it uses a random string of characters.  I just wanted to post the code and images that I redid in case someone else wanted a different look, or wanted to see what I did so they could make the captcha look how they wanted.  It isn't too hard if you know PHP and an image manipulation tool like Photoshop or the Gimp.   

Here is an example of what the script looks like (used with the eForm snippet). 

Enjoy,
James

[rthrash]

Does look much better indeed. Thanks for sharing.

[sinbad]

anyway to make it non case sensitive?
I tried just lowercase the letters in the file but that makes the letters sometime* unreadable inside the box as they drop down...

[BobRay]

I don't think it's available as a settable option, but you could easily change the code that evaluates the user's input against the $_SESSION variable to do a case-insensitive compare.  These are off the top of my head and untested:

If it's eForm that's doing the check for example, you'd need to change this line (line 178 in eform.inc.php):

Code:

if($fields['vericode']!=$code) {

to

Code:

if (strtolower($fields['vericode']) !=  strtolower($code) ) {

or

Code:

if (strcasecmp($fields['vericode'], $code) == 0) {

Which might be a little faster.

WebLoginPE, OTOH, has

Code:

if ($_SESSION['veriword'] !== $formcode)

which could be changed to

Code:

if (strcasecmp($_SESSION['veriword'],formcode) != 0)

The Manager login comparison is in manager/processors/login.processor.php:

Code:

elseif ($_SESSION['veriword'] != $captcha_code) {

would change to

Code:

elseif (strcasecmp($_SESSION['veriword'],$captcha_code) != 0 )  {

Note that if the captcha words have non-English characters (e.g. é), you might need a more complicated comparison function.

[sinbad]

consider

Code:

if (strcasecmp($fields['vericode'], $code) == 0) {

as tested. it works perfect

however the manager capacha gives an error in the related file. mind trying again that one?

[BobRay]

. . . however the manager capacha gives an error in the related file. mind trying again that one?

Oops, missing right bracket and right parend. It should be:

Code:

elseif (strcasecmp($_SESSION['veriword'],$captcha_code) != 0) {

(fixed in post above also -- I hope).

Thanks for checking.

Bob

[mrhaw]

Thank you BobRay!!  

[sinbad]

No, thank YOU for checking. This works well. Guess we have both tested. sorry don't have WLPE.
Thank you very much!

[sinbad]

btw, for the standard modx capacha you can simply type your words in lower case. I use this modified capacha from devtrench and don't want to lose users due to frustration so bob's solution is perfect...

[dev_cw]

Nice tip, bookmarked 

BobRay is becoming quite an encyclopedia of modx code (old and new), I am impressed that he knew all those code bits off the top of his head (I would have been opening files and searching for hours). Looks like another team member who 'eats php for breakfast' 

[BobRay]

Thanks for the kind words. I wish I could make that claim.

I use NuSphere's PhpED as my primary code editor. It has a whole modx install as one project, and Revo as another. It will do a search of the entire MODx codebase in about 5-10 seconds (a little longer for a regex search). When the search is done, it shows each found line in a list in the Search Results pane and, if you click on one, it loads the file for editing and puts the cursor on that line in less than a second.

As a bonus, in the Pro version, I get code highlighting, code folding, multi-file regex search and replace, a db browser/editor, a code explorer, ftp, a zillion keyboard shortcuts, a built-in php debugger, code autoformatting, and a NuSoap Client. If I right-click on a function call, it will offer to take me to the function declaration -- even if it's in a different file. If I right-click on an include file name, it will offer to open the include file. If I start typing a variable name, it will show me a list of variables in the current file to select from.

I couldn't live without it. Someday I'll do a review of it for Bob's Guides.

I should mention that many, if not all, of these capabilities are available in PhpEclipse for free. I happen to like the PhpED user interface better (and it's a one-step install/upgrade) but many people swear by the Eclipse platform.