Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:11387 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 93063 invoked by uid 1010); 20 Jul 2004 18:32:55 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 91824 invoked from network); 20 Jul 2004 18:32:48 -0000 Received: from unknown (HELO mail3.panix.com) (166.84.1.74) by pb1.pair.com with SMTP; 20 Jul 2004 18:32:48 -0000 Received: from panix5.panix.com (panix5.panix.com [166.84.1.5]) by mail3.panix.com (Postfix) with ESMTP id 6BAEE98287 for ; Tue, 20 Jul 2004 14:32:44 -0400 (EDT) Received: (from analysis@localhost) by panix5.panix.com (8.11.6p2-a/8.8.8/PanixN1.1) id i6KIWie29787 for internals@lists.php.net; Tue, 20 Jul 2004 14:32:44 -0400 (EDT) Date: Tue, 20 Jul 2004 14:32:44 -0400 To: PHP Internals List Message-ID: <20040720183244.GA24359@panix.com> References: <6.1.2.0.0.20040720175549.04278000@127.0.0.1> <1743636665.20040720125308@ionzoft.com> <20040720172122.GA10712@panix.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.1i Subject: Re: [PHP-DEV] Spammer on Bugs page From: danielc@analysisandsolutions.com (Daniel Convissor) On Tue, Jul 20, 2004 at 07:47:41PM +0200, Derick Rethans wrote: > On Tue, 20 Jul 2004, Daniel Convissor wrote: > > I'm in the middle of making a quick and dirty CAPTCHA routine for the bug > > form on pear.php.net. I'll post the diff when it's ready. > > We'll also need something like that for cvs accounts/pear/pecl account > requests I guess? I put them in place for the PEAR bug and account request forms. It's pretty crude. All it does is set a session var with a segment of the microtime then asks the user to confirm that number. So, if a bot tries to submit directly via POST, the value won't be set, so they get rejected. Here's the file overviews: http://cvs.php.net/pearweb/public_html/bugs/bug.php http://cvs.php.net/pearweb/public_html/account-request.php and the particular diffs: http://cvs.php.net/diff.php/pearweb/public_html/bugs/bug.php?r1=1.56&r2=1.57&ty=u http://cvs.php.net/diff.php/pearweb/public_html/account-request.php?r1=1.39&r2=1.40&ty=u Feel free to port them to the PECL and PHP sites. --Dan -- T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y data intensive web and database programming http://www.AnalysisAndSolutions.com/ 4015 7th Ave #4, Brooklyn NY 11232 v: 718-854-0335 f: 718-854-0409