1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
|
<?php
$wgExtensionCredits['other'][] = array(
'name' => 'FunnyDot',
'version' => '2.1',
'description' => 'Automated CAPTCHA',
'author' => 'Pierre Schmitz',
'url' => 'https://www.archlinux.de'
);
if ($wgGroupPermissions['*']['edit']) {
$wgHooks['EditPage::showEditForm:fields'][] = 'FunnyDot::addFunnyDotToEditPage';
$wgHooks['EditFilter'][] = 'FunnyDot::checkFunnyDotOnEditPage';
}
if (empty($wgAuth)) {
$wgHooks['UserLoginForm'][] = 'FunnyDot::addFunnyDotToUserLoginForm';
$wgHooks['AbortLogin'][] = 'FunnyDot::checkFunnyDotOnAbortLogin';
}
if ($wgGroupPermissions['*']['createaccount'] && (empty($wgAuth) || $wgAuth->canCreateAccounts())) {
$wgHooks['UserCreateForm'][] = 'FunnyDot::addFunnyDotToUserCreateForm';
$wgHooks['AbortNewAccount'][] = 'FunnyDot::checkFunnyDotOnAbortNewAccount';
}
$wgSpecialPages['FunnyDotImage'] = 'SpecialFunnyDotImage';
class FunnyDot {
private static function getFunnyDot() {
global $IP, $wgFunnyDotHash, $wgScript;
!isset($wgFunnyDotHash) && $wgFunnyDotHash = $IP;
$time = time();
$hash = substr(sha1($time.$wgFunnyDotHash), 0, 4);
return '<div style="background-image:url('.$wgScript.'?title=Special:FunnyDotImage&FunnyDotTime='.$time.');visibility:hidden;position:absolute;z-index:-1">
<label for="FunnyDotHashField">Please type in the following code: <strong>'.$hash.'</strong></label>
<input id="FunnyDotHashField" type="text" name="FunnyDotHash" size="4" value="" />
<input type="hidden" name="FunnyDotTime" value="'.$time.'" />
</div>';
}
private static function checkFunnyDot() {
global $IP, $wgFunnyDotHash, $wgFunnyDotTimeout, $wgFunnyDotWait;
# set some sane defaults
# can be overridden in LocalSettings.php
!isset($wgFunnyDotHash) && $wgFunnyDotHash = $IP;
!isset($wgFunnyDotTimeout) && $wgFunnyDotTimeout = 3600;
!isset($wgFunnyDotWait) && $wgFunnyDotWait = 2;
if (!empty($_POST['FunnyDotTime']) && (!empty($_COOKIE['FunnyDotHash']) || !empty($_POST['FunnyDotHash']))) {
$now = time();
$time = $_POST['FunnyDotTime'];
$hash = !empty($_POST['FunnyDotHash']) ? $_POST['FunnyDotHash'] : $_COOKIE['FunnyDotHash'];
} else {
return false;
}
if ($hash != substr(sha1($time.$wgFunnyDotHash), 0, 4)) {
return false;
} elseif ($now - $time > $wgFunnyDotTimeout) {
return false;
} elseif ($now - $time < $wgFunnyDotWait) {
return false;
} else {
return true;
}
}
public static function addFunnyDotToEditPage($editpage, $output) {
global $wgUser;
if (!$wgUser->isLoggedIn()) {
$editpage->editFormTextAfterWarn .= self::getFunnyDot();
}
return true;
}
public static function checkFunnyDotOnEditPage($editpage, $text, $section, $error) {
global $wgUser;
if (!$wgUser->isLoggedIn() && !self::checkFunnyDot()) {
$error = '<div class="errorbox">Please type in the correct code!</div><br clear="all" />';
}
return true;
}
public static function addFunnyDotToUserLoginForm($template) {
$template->set('header', self::getFunnyDot());
return true;
}
public static function checkFunnyDotOnAbortLogin($user, $password, $retval) {
# LoginForm::ABBORT is not yet supported by MediaWiki
$retval = LoginForm::ILLEGAL;
return self::checkFunnyDot();
}
public static function addFunnyDotToUserCreateForm($template) {
$template->set('header', self::getFunnyDot());
return true;
}
public static function checkFunnyDotOnAbortNewAccount($user, $message) {
if (!self::checkFunnyDot()) {
$message = '<div class="errorbox">Please type in the correct code!</div><br clear="all" />';
return false;
} else {
return true;
}
}
}
class SpecialFunnyDotImage extends UnlistedSpecialPage {
function __construct() {
parent::__construct('FunnyDotImage');
}
function execute($par) {
global $wgFunnyDotHash, $wgOut;
# I will handle the output myself
$wgOut->disable();
!isset($wgFunnyDotHash) && $wgFunnyDotHash = '';
if (!empty($_GET['FunnyDotTime'])) {
setCookie('FunnyDotHash', substr(sha1($_GET['FunnyDotTime'].$wgFunnyDotHash), 0, 4), 0, '/', null, isset($_SERVER['HTTPS']), true);
}
header('HTTP/1.1 200 OK');
header("Cache-Control: no-cache, must-revalidate, no-store");
header('Content-Type: image/png');
header('Content-Length: 135');
# transparent png (1px*1px)
echo base64_decode('iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAAXNSR0IArs4c6QAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9gLFxMRGNZyzLoAAAACYktHRAD/h4/MvwAAAAtJREFUCB1j+M8AAAIBAQDFXxteAAAAAElFTkSuQmCC');
}
}
?>
|
