Re: Security

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Rob Giordano (Crash) wrote:
Yah, I just used an image editor and distorted the digits... 1951 and
made a form field requiring 1951 as input (a note for users to enter
1951 next to the field) . Change the image? ... I'm lazy...I haven't
in almost 2 years and haven't gotten any robot junk.

Not very sophistikated but it seems to werk fer moi.

Rob,
I thought about doing this but on looking at the captcha.net site, I realised that I could use their code.

This is my cut-down version of the code.
I have removed most of the styles, but commented out (or set <input type="hidden" ...> ) for HTML code not used

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd";>
<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en">
<head>
<title>captcha</title>
<style type="text/css">
body{ font-family: sans-serif; }
</style>
<script src="scripts/md5.js" type="text/javascript"> </script>
<script src="scripts/update.js" type="text/javascript"> </script>
</head>
<body onload="update ()">
<form action="">
<table>
<tbody>
<tr>
<td><!-- Username: --></td>
<td><input type="hidden" id="captcha_client" value="demo" size="40"/>
</td>
</tr>
<tr>
<td><!-- Secret Key: --></td>
<td><input type="hidden" id="captcha_key" value="secret" size="40"/></td>
</tr>
<tr>
<td><!-- Random String: --></td>
<td>
<input type="hidden" id="captcha_random" value="RandomZufall" size="40"/>
</td>
</tr>
<tr>
<td colspan="2" style="text-align: center; vertical-align: middle; height: 40px">
<!-- <input type="button" value="Compute" onclick="update()"/> -->
</td>
</tr>
<tr>
<td>CAPTCHA Password:</td>
<td><input type="text" id="captcha_password" size="10"/></td>
</tr>
<tr>
<td><!-- CAPTCHA Image Link: --></td>
<td><input type="hidden" id="captcha_pic_link" size="80"/></td>
</tr>
<tr>
<td>CAPTCHA Image:</td>
<td>
<img src="http://image.captchas.net?client=demo&amp;random=RandomZufall"; alt="CAPTCHA Picture" id="captcha_pic"/>
</td>
</tr>
<tr>
<td><!-- CAPTCHA Audio Link (beta): --></td>
<td><input type="hidden" id="captcha_audio_link" size="80"/></td>
</tr>
<tr>
<td><!-- CAPTCHA Audio (beta): --></td>
<td>
<a href="http://audio.captchas.net?client=demo&amp;random=RandomZufall"; id="captcha_audio">
<!-- Phonetic Spelling of the CAPTCHA (beta) --></a>
</td>
</tr>
</tbody>
</table>
</form>

</body>
</html>

I extracted the files "md5.js" and "update.js" from http://captchas.net

This accesses the captcha.net site via
<img src="http://image.captchas.net?client=demo&amp;random=RandomZufall"; alt="CAPTCHA Picture" id="captcha_pic"/>
where client remains as "demo" and random is altered via the code in the fuction update().
It doesn't seem to matter what value captcha_key takes.

For some reason, the audio link is also needed even if not used. Otherwise the password is blank. (I can't figure out why !)

My version returns the password and the image. To get a different pair of these alter the value in
<input type="hidden" id="captcha_random" value="RandomZufall" size="40"/>
e.g. value="RandomZufall123eT" returns cqxtlt

Of course, the password result would be used to check what the visitor types.

BTW, I googled for "Rob Giordano" to see if I could find the site where you use this method, but to no avail.
--
Cheers,
Trevor L.
Website: http://tandcl.homemail.com.au


.

Quantcast