Com securityimages a captcha framework

From Walter Cedric Wiki

Jump to: navigation, search

Contents

SecurityImages 4.0.x for Joomla! 1.0.X

SecurityImages 5.0.x for Joomla! 1.5.X

com_securityImages installation

Project location

project is located at http://developer.joomla.org/sf/sfmain/do/viewProject/projects.com_securityimages

What it does

Security images are dynamically generated images containing distorted and hard to read text. It uses a combination of font colors, font size, fuzzy backgrounds and font angle to prevent computers from automatic reading (to limit spamming). Users (a human) must enter all characters from the distorted image correctly before being allowed to post.

Warranty

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. A GNU-GPL release

Requirements

See SecurityImages server requirements


How to install

Installation for the first time

  1. This file can be installl like any component using the admin panel
  2. As default the component com_securityimages use the plugins "core" in version 1.1

Update new version of securityimage to a production site

  1. Unpublish the component com_akocomment if it exists
  2. Unpublish the component com_akobook if it exists
  3. Unpublish the mambots com_akocommentbot if it exists
  4. Remove the component com_securityimages using the component installer
  5. Install the new version of com_securityimages using the component installer
  6. Remove the old mambots and install the new one (if point 3 was necessary).
  7. Remove the old akobook version if needed and install the new one if you have done the point 2.
  8. Remove the olf akocomment version if needed and install the new one (if point 1 was necessary)
  9. Publish component 1. 2. and mambot 3 back

Risks during install

No data can be lost as it is only php object code. Creates a new table mos_securityimages.

Manual changes to be made

None. But the component is globally deactivated after install. Go to Administrator main menu> Components> Security Images> Edit General Settings,


Image:Mainmenu.jpg


and change Switch component OFF globally to: No (below)


Image:panel.gif

After installation, verify that

You can access the admin panel...

Image:Mainmenu.jpg


By pointing your browser to http://youhost/components/com_securityimages/plugins/core/1.1/imageGenerator.php Image:VerifyInstall.gif

You see a security image (HIT reload page or refresh to receive a new one)

Usage

  1. Always go first to Edit general settings to choose your core (If you want to change the default)

Image:ChooseCore.jpg

You can type freely the name of the plugins You want to use, and it's version. Currently only core, 1.1 and freecap 1.4 is available. No check is done, You must enter an existing plugin name!

  1. By using the menu Edit core settings, You will be able to change all parameters depending on the plugins. The admin panel is dynamic and depending on the plugins you have choosen at point 1

Admin panel for the plugin core 1.1:

Image:Adminpanelcore1.1.jpg

Admin panel for the plugin freecap 1.4:

Image:Adminpanelfreecap1.4.jpg

Caution!

1. Use and abuse of the button (Image:Reload.gif) in admin panel, most of the time, depending on the backgroung, font color, size even You wont be able to read or recognize the word in the image.

2. The plugin freecap is limiting the number of reload per user session, (setting: Retr) if you ever reach this limit, You will get such a picture: Image:Maxretryreached.gif

3. Each form sent to the user now contains an image, this image has a refid property which is tore in the database. I You have an enourmous number of user viewing pages , this table will grow, grow, grow, adapt the SQL timestamp (data get cleaned automaticaly after a certain period of time)

4. The sound function (button Image:speaker.gif) is still in development as it is pretty difficult to find a GPL voice engine.

Plugin comparaisons:

Plugins comparaisons

'Depending on the core You choose...'

core freecap
User can reload indefinitely the picture I will implement it as patch level 2.0.X has a reload picture limit function
ideal for avoiding brute force attack
Has 24 background pictures has 4 but distorded background pictures
Output captcha only as PNG, may create some compatibility problem with old broserI will implement it as patch level 2.0.X can output captcha as PNG, GIF, JPG
Has no dictionnary based words has a limited 6500 english words dictionnary
Persistence of data is done using Database I will implement session storage as patch level 2.0.X Persistence of data is done using user session
Captcha circumvention not implemented I will implement it as patch level 2.0.X Captcha circumvention is implemented
Captcha are of different size, size can be decided by
       providing a http parameter 
&size=S or &size=L or &size=XXL
Captcha are of only one size
Is a lot more configurable  

Developer corner

Report Bugs

please use the tracker at http://developer.joomla.org/sf/tracker/do/listTrackers/projects.com_securityimages/tracker

Known Issues

All

Windows

'1. If You are updating an existing install of com_securityimages'

Under windows server fonts get loaded and referenced by the PHP engine, in other word as soon as you install com_securityimages and start to use it, You simply can't deinstall it (completely I mean /fonts directory will persist on server) withouting restart apache before! because Jomla can no more delete the fonts directory!!! Workaround: simply copy all new files to the correct place on your server or restart Apache, and deinstall quickly before a user ask a CAPTCHA :-)

Linux

'1. Installer do not install all files in administrator/components/com_securityimages/'

This is a know issue. the file securityImages.xml (description for JOOMLA where to install file) even if it is well formed contains something that stop the installer only under linux. This issue is solved since the binary release 1.1.2


FAQ

  1. I want to edit the instructions to suit my site from "Enter what you see: tips: hit Reload page..." to something else.

in version 1.1.x the file is into /administrator/components/con_securityimages/languages/ in version 2.0.X it is at the same place but languages can be edit in realtime using the admin panel under the menu "edit general language" or "edit core language""

ChangeLog

3.0.4

  • BUG: captha combo box is now Joomla, Mambo CSS aware class="inputbox"
  • BUG: affecting array of font was not working and lead to a corrupt array in plugin core 1.1
  • BUG: HNCAPTCHA O, o I and i and 1 impossible to read...This is not due to the random Text Generator but more to one font rubberst.ttf, get rid of it in the "hncaptcha core admin panel". Remember the more fonts the more difficult to hack it with OCR robots.
  • NEW add czech translation

3.0.3

  • new: Czech language support thanks to Karel Neugebauer jr. http://itx.cz

3.0.2

  • new: Logged in Users No/Yes Switch off the system for logged in users?
  • new: new plugin HNCapctha which create beautiful captcha (as seen on my site)
  • new: better localization of installation
  • new: A system class detector which detect GD library and help users
  • new: add 3 more fonts
  • bug: reverse logic for displaying reload, sound button
  • new start sound support, not active in this release.
  • new better admin panel with screenshots of possible captcha and securityimage virtual box
  • Refactoring:
    • OO improvments: 8 new classes, DAO, move common setting to general tabs
    • move fonts to root of components/com_securityimages so they can be share among plugins
  • Depending on settings in admin panel, the logic was reversed for "Display or not the reload button" and "Display or not the sound button (function not implemented)"
  • Remove "image content-type" settings it is not needed -> provide a select boy with gif, jpg, png output possibility instead
  • Logs are now database based. with a query engine to search a specific spam attempt.
  • Logs can be export to CSV, HTML, XML
  • Better localization in admin panel, more keys in english.php
  • Add /manuals directory with a manual on how to install securityimages in login, registration
  • A file selector (can be reused GPL) for selecting background pictures to be used
  • More background
  • New language file brazilian_portuguese.php courtesy of Fernando B.

2.0.0

soon!


1.1.4

BUG: image memory was not free after generation -> recommended to use at least 1.1.4

1.1.3

NEW: Japanese translations courtesy of Athron (athron at jamambodot com) - www.jamambo.com NEW: Japanese patch for byte character support

1.1.2

NEW: German translations courtesy of Jörg Alexander Ott (j.a.ott at gmx dot de) - www.lomosoft.de

Personal tools
Google AdSense