Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:120274 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 91409 invoked from network); 14 May 2023 21:59:41 -0000 Received: from unknown (HELO php-smtp4.php.net) (45.112.84.5) by pb1.pair.com with SMTP; 14 May 2023 21:59:41 -0000 Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 236E3180384 for ; Sun, 14 May 2023 14:59:38 -0700 (PDT) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_ENVFROM_END_DIGIT, FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE, SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.2 X-Spam-ASN: AS15169 209.85.128.0/17 X-Spam-Virus: No X-Envelope-From: Received: from mail-yb1-f169.google.com (mail-yb1-f169.google.com [209.85.219.169]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Sun, 14 May 2023 14:59:37 -0700 (PDT) Received: by mail-yb1-f169.google.com with SMTP id 3f1490d57ef6-b9dea9d0360so15845083276.1 for ; Sun, 14 May 2023 14:59:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1684101577; x=1686693577; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=7e3OZXeXTD0FJjmAHpBlI4pPhT5kIGF6HHexBCIcSGQ=; b=D7bF59SaWuo9GfMMvszAWt4g15bik/TDnMAOHuZ0dNH1pHhQDph61lF3fMTvBkAIVo oT6nsCcOrtLLZEGPQWDbaSI42/yVecD6qGyIym4Qwy3dR1K3BGIfhpCUPUmSBBV0GxoO 6zUlFxudstQIfRJt0pnSuLLFtdDIAP/eCmzRLR7Y8Z+ceA+0NoSEkAYmcDk9qB7TPenu uMl/fpI9RaYcEq9qzhHonAA8b02QvaUUcYNrPYmfHuJDb9hpK33J/yS47uLAkJt3nqcj NXlhQ3Xi2TwvNaABQz6G2JSWpCFolCMetyCB6/U3hTzXtiSrZqUpVFkgs2cc4+j/7mjk no4Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1684101577; x=1686693577; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=7e3OZXeXTD0FJjmAHpBlI4pPhT5kIGF6HHexBCIcSGQ=; b=fNqMy7KnpCZ8tm6BybpnRFtgyjlccojFjOpJGSXjKqOqFWNDGuDbdQ3YLDAcQkTp3g azUrQqsPOi/s3YcX7tJYEBHcCzoz5dc8hnX8Kj/gZA+hF1SEBv2QHTbU8qqpA9FqcGPR tYXK0XYnrTPlf4XWREMOEWFdODLCcsvZS8FXcPlZdLLj2pT4qSJO/vF3qfo8zSbrlk3L VcmO3fKHGcus1iPh9B4FhS0zFWZGvkPcrKhB+AgrwTib2Ap31GaBl7YMJFc/YbGqmL/6 WW1G1ybLByNWY6Ov6GDfrhaS3ddPTqjeO5krjLe7iRzAKKQEvZimlCdHIsXL5icuADOp LZ+Q== X-Gm-Message-State: AC+VfDwU2CwHEc/M7gNhzqiVvYrXv8kAAqeaxzrEY1kaufjAqhcuIpDd TFBxvKyCGbsXVsw0nbUnCCkPBb8UcAxLLdS/LPM= X-Google-Smtp-Source: ACHHUZ4bTHF57Cy9rRb61AXWWGv3M5VkZS1aCRIGQqKMmxLOyG5EzusNhP5IxgYiyKwNy5piufkhy18Xgf2WyQszP6g= X-Received: by 2002:a25:e7cd:0:b0:ba6:ed36:cc9b with SMTP id e196-20020a25e7cd000000b00ba6ed36cc9bmr7194063ybh.0.1684101576585; Sun, 14 May 2023 14:59:36 -0700 (PDT) MIME-Version: 1.0 References: <805B1EBC-0E98-4A65-AB46-671C76ABC270@gmail.com> In-Reply-To: <805B1EBC-0E98-4A65-AB46-671C76ABC270@gmail.com> Date: Sun, 14 May 2023 23:58:59 +0200 Message-ID: To: Rowan Tommins Cc: PHP internals Content-Type: text/plain; charset="UTF-8" Subject: =?UTF-8?Q?Re=3A_=5BPHP=2DDEV=5D_Please_remove_the_Sicherheits=C3=BCberpr=C3=BC?= =?UTF-8?Q?fung_Security_captcha_from_php=2Enet?= From: divinity76@gmail.com (Hans Henrik Bergan) >a misconfiguration That's my guess too. I Hope the server configuration people get the message. >I think the page is just hard-coded in German and English I'm not sure there is an English version at all - I'm not accessing it from a german IP address (a Norwegain one - actually multiple Norwegian ones), and my Accept-Language doesn't mention German, and it specifically requests English, and I'm not accessing the german de.php.net, so if an English version existed, there would be no reason for it to give me a German version, so my best guess is that it's just hardcoded in German. (tl;dr: if an English version exists, I have no idea why I was served the German version.) On Sun, 14 May 2023 at 23:36, Rowan Tommins wrote: > > On 14 May 2023 21:48:51 BST, Hans Henrik Bergan wrote: > >fwiw for those of you lucky enough to not get the captcha page, it > >looks like https://i.imgur.com/l9YbIz5.png > > I'd never seen it before, but saw it just now when looking for mirror information. My guess is that either there's a misconfiguration somewhere making it far too sensitive, or there's something like a DoS attack being defended against. > > > >Also I'm not sure why it's in German > > I think the page is just hard-coded in German and English because the company hosting the mirror ("MyraCloud") are based in Germany, and haven't added any other translations. > > > Regards, > > -- > Rowan Tommins > [IMSoP]