Comments on: Wordpress Plugin: Login and Register Anti-Spam Captcha

By: Richard Blair

Richard Blair — Wed, 05 Sep 2007 12:32:21 +0000

Installed it. Seems to be working well. Thanks for the plugin!!

By: Kees

Kees — Wed, 05 Sep 2007 19:07:59 +0000

Installation went OK. I could activate the plug-in, but the image with the generated comments does not show, and log-in is no onger possible!

A picture of what I get is shown on this page: http://www.chc-telraam.nl/?page_id=3

I hope you can help!

By: Raz

Raz — Thu, 06 Sep 2007 06:34:47 +0000

@Richard: thank you
@Kees: Well if that happens just remove or rename the plugin folder and Wordpress will deactivate the plugin automatically. Have you changed the folders structure/names? because a part of them are hardcoded, so the image will not get generated because is not found in the same relative path: wp-content\plugins\raz-captcha. If you can get me a source code of your generated login/register page after the plugin is activated will help me out to find out what is going on
Thanks

By: Kees

Kees — Fri, 07 Sep 2007 08:21:56 +0000

Thanks for the feed-back. I used your gmail account to mail you the information you requested. I really hope you will be able to help out, because the registration spam is starting to become irritating!

Could the cause be found in the GD and/or freetype library? I’m not sure how to find out if these are installed (other than asking the provider!)

By: Raz

Raz — Fri, 07 Sep 2007 08:33:56 +0000

Hi Kees,
Thanks for your mail, I’m on my way with the tests.
Yes, if you don’t have the GD or FreeType lib it will not work because the image can’t get generated. I will update the plugin in the feature versions so that it will warn you if it cannot find them.
I have a question about your installation: what captcha engine did you used? Try switching to another engine. The default one : PNG-GOTCHA needs the freetype lib but the rest of them need only the GD lib. The safest one is PNG-phpBB3 8bit Grey because it doesn’t need GD or FreeType lib but the engine itself is not so strong against spam-bots, ocr geeks, hackers or whatever you call them .
Thanks

By: Raz

Raz — Fri, 07 Sep 2007 09:13:48 +0000

Checking what extensions are installed on your host it’s easy, just create a php file with the following code on your server: < ?php phpinfo(); ?> and then open the file thro your browser and search for the GD and free library support, if you can’t find them then they are not installed…
Hope it helps.

By: Kees

Kees — Fri, 07 Sep 2007 19:34:33 +0000

Raz,
The plug-in is working now. Thanks a lot for your support! The problem was not your plug-in, but my Wordpress Install .

Tkanks again for a great plug-in

By: Raz

Raz — Fri, 07 Sep 2007 20:29:20 +0000

You’re welcome! Glad it got fixed and glad I could help

By: Dicontas

Dicontas — Mon, 10 Sep 2007 21:04:19 +0000

Hi,
Thanks for plugin, but when I activated plugin, then go to Options tab, the plugin has an error in the homepath with double foward slahes between the root directory and the plugin path to the fonts directory:

i.e. //wp-content/plugins/raz-captcha/fonts/

My blog home is http://www.dicontas.co.uk/blog/ so it may be that it is not at the domain root that is causing the error in your plugin.

By: Dicontas

Dicontas — Mon, 10 Sep 2007 21:38:28 +0000

realized the error - you need to keep the plugin folder called raz-captcha. I missed out the dash in the folder name.

I consider this a small bug as other blog admins may also choose to change the name for increasing security.

By: Raz

Raz — Tue, 11 Sep 2007 06:46:44 +0000

Hi Dicontas.
This is still beta and in the second install step I’ve warned you: “Decompress the .zip archive into your plugins directory (/wp-content/plugins/) keeping zip folder structure intact“. By renaming the folder you’ll don’t get much security, your folder path/script renamed name will be visible in the page browser source anyway. Bots would not be stopped if they just need to do a simple parse job, trust me
Good luck and thanks for your feedbak.

By: Jared

Jared — Thu, 13 Sep 2007 05:52:07 +0000

Hello, I am using the themed registration plug in here:
http://www.jameskelly.org/wordpress-plugins/custom-login-and-registration-forms-plugin/
Because of that your plug in isn’t showing up on the registration page. I think I would be able to hack that plug in and add your code into it to make it work. What code do I need to add to the form?

Thanks!

By: Raz

Raz — Thu, 13 Sep 2007 07:06:35 +0000

Hi Jared,
The themed plug you’re using, as far as I can see, it doesn’t install the same hooks as wordpress does on login and register pages, is not plugin aware. The only way i can see it working is to modify the themed plug so that it will call the hooks just like wordpress does (see wp-login.php file actions/filters). Not sure if it works but give it a try. If you’re a coder have a look in the wp-login.php of your wordpress instalation, raz-captcha needs this hooks actions:
do_action(’login_head’);
do_action(’wp_authenticate’);
do_action(’registration_errors’);
do_action(’register_form’);
I will have a look at the themed plug when I’ll have some free time tho, Good luck!

By: emre murat

emre murat — Thu, 20 Sep 2007 14:16:19 +0000

Hi, Raz.

This is very good plugin.
I did download and just click activate. It’s working on my site.(i’ll install my other sites on bluehost)

I want to send a some donation for easly and goog plugin but Paypay is say to me:
Currently PayPal accounts in Romania are only able to send payments. This recipient is not eligible to receive funds

Then, i stumble it

Thanks.

By: Raz

Raz — Thu, 20 Sep 2007 14:31:24 +0000

Hi emre murat,
PayPal didn’t support my country for a while. But it is supported now, see Donations page here. Thank you very much for your support and donation!

By: Kretzschmar

Kretzschmar — Fri, 21 Sep 2007 16:28:50 +0000

Great, just installed your plugin. Are you interested in a gettexted version of your plugin? I could make all changes and translate it to german. Just mail me if you are interested.

By: Kretzschmar

Kretzschmar — Fri, 21 Sep 2007 17:11:01 +0000

It is a great plugin but isn’t working for me. I am using Wordpress 2.3 beta. Options pages is working. Although I tried it several times, I couldn’t log in. I really spelled the captcha correct. Is support for Wordpress 2.3 planed?

By: Raz

Raz — Fri, 21 Sep 2007 21:46:22 +0000

Hi Kretzschmar,
Yeah, you can modify/translate the plugin for your needs. I don’t mind as long as you keep the original authors in place
I didn’t do tests with v2.3 of wordpress, but it should work… If you can get the image to generate but not validate make sure you don’t clear the $_SESSION var where the random code hash is saved ( $_SESSION[’raz_captcha_gen’] ) when accessing the login/register page.
Thanks

By: Kretzschmar

Kretzschmar — Tue, 25 Sep 2007 19:59:29 +0000

I don’t want to make my ‘own’ version. I would like to send you my changes so you could use them in future versions.
I don’t know if you are familar with gettext but the base language would be english and only if tranlsation files are used, the plugin would translate those.

Do you mean that some plugin could alter this var? Why and how should I change the session var in the login screen?

By: Raz

Raz — Tue, 25 Sep 2007 20:26:59 +0000

Hi Kretzschmar,
Is not the var itself that is changed, it’s kinda unique name (i guess) but the entire $_SESSION could be cleared … do an echo test before the register validations / image generation in your login/register page, see if the var is there: echo $_SESSION[’raz_captcha_gen’]; It should print the password hash, if it doesn’t then your $_SESSION is cleared for some reason.. because it doesn’t find the previous generated hash to match with the one the user (or spammer ) has just entered in the box and fails, I don’t see other reason for failing…
Yes, send your changes on my gmail.com account: razvaR -at- gmail -dot- com and I will include them in the next release (not sure when that will happen tho)
Thanks

By: m1chu

m1chu — Wed, 26 Sep 2007 19:25:01 +0000

Hello, i think that i was discover some kind of bug in your script. In file raz-captcha.php in line 198 and 199 you firstly load class method and than you set hashed $password to the session. And there is a problem, because $_SESSION[’raz_captcha_gen’] is empty or incorrect after token was type. I saw through execute method and at the end of them you are killing the script (exit;). And script can’t set session value. You should replace line 198 with 199 and vice verse’a, for example:
$_SESSION[’raz_captcha_gen’]=md5($password);
$captcha->execute($password, time());
Than you firstly set session than you execute your method and at the end you will stop the script. Everything should works fine.

It’s very unkind bug…

Tested on 2.2.3 version of Wordpress. If you want to know something more, type to my email.

By: Raz

Raz — Thu, 27 Sep 2007 06:49:08 +0000

Hi m1chu,
Thanks for your fix

By: qwe

qwe — Thu, 11 Oct 2007 12:10:21 +0000

this magnificent

it works good

but just on firefox ? on Internet Explorer show empty ?

By: Enni

Enni — Sun, 21 Oct 2007 18:32:47 +0000

@qwe: For me it works fine with IE. At least with version 7.x.

Raz, indeed this is a superb plugin. Seems I don’t get any spam registration anymore. Yipiiieh! I only installed it 2 days ago so it might be too early to give a final OK but so far I’m just happy! Thank you sooo much!

The only little sad thing is that it doesn’t work with James Kelly’s Themed login plugin. The same story Jared wrote about. May be one day you will have some free time and check that out. Will have a look on the news from time to time.

By: Raz

Raz — Mon, 22 Oct 2007 06:59:14 +0000

@qwe: Thanks, works fine on IE (6 or 7) , what captcha engine are you using?
@Enni: Thank you for your feedback. If you’re geting registration spammers just change your image generation engine, or customize one with the custom engine: PNG-Raz MiXed Fonts. I can’t do much about James Kelly’s Themed login plugin, as far as I can see the themed login does not let other plugins (like my captcha) to interact with the login/register forms as wordpress does. So, i think you should ask the plugin author to add the same actions/hooks request as wordpress does to support wp plugins.

By: Enni

Enni — Wed, 24 Oct 2007 02:29:59 +0000

Hi Raz, unfortunalety I rejoiced too soon. Still I get those registrations. Also with the mixed fonts.

Don’t know how they overcome the CAPTCHA, but obviously they do. It might have something to do with a forum plugin, because always the entry page is /forum. Next step either /wp-register or /forum?action=register.

If I call those pages manually I’m always forced to enter the code. So I don’t have any idea how it is possible to register without filling that field.

Only thing which helps is to block the according IPs. But I don’t have them always as with registration the numbers are not transfered. So I just find them by coincidence in the stats.

Regarding the James Kelly plugin: I deactivated it since I found another way of having nicer registration pages.

By: Raz

Raz — Wed, 24 Oct 2007 06:54:49 +0000

Hi Enni, sorry to hear about that, my only guess is that they are maybe ‘manually’ registred, you may be a target of those kind of spam that are registred by a human not a bot? Not much I can do about that, except to save the IP of the registred user and ‘manually ‘ ban him from the admin, something like: “disallow registration from this IP list”, I think that will be a nice feature
later: I see you are using numbers only in your captcha, try including some chars, some special ones like @ or $
In the plugin settings you have the option to set what type of chars to random generate in your captcha, by default it has numbers only but you can set any type of character. Just add @!#$�CDEFGHIJKLMNPWRSTUVWXYZ to the Accepted Chars box and hit the save button to make your captcha stronger…

By: Enni

Enni — Wed, 24 Oct 2007 08:12:53 +0000

Dear Raz,

Thanks a miilion for caring so much. Actually, I really can’t believe that the registrations were done manually. Although also to me it seems to be the only explanation how they are able to register. Because for the forum they need to register via the usual process as well. So it’s not that logical why they choose this specific path. Doesn’t make sense to me.

Maybe I will get in contact with the developer of the forum. He should have heard about this problem already. All people I know who are fighting with these spammers too are using the forum plugin.

But I’m going to do other investigations as well. Even if I’m not a programer and don’t know much about coding I should be able to detect a pattern of those registrations.

So far all I can say is that the used systems are very old. An example from this morning:

Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Firefox/0.10

This is brand new compared to some others (Browser versions from 2002 for example). If there would be a way o say ‘browser versions before 2006 are banned from registrations’ that might be working. Don’t have a clue if that is possible.

What strucks me is that it is not enough to ban a domain from registration (deadbolt or wp-ban plugin). For example ‘domain.com’ or just ‘*.com’. They still can register with such a domain! As I wrote before: Only thing that helps is to ban the IPs.

Ooops … what a long story I wrote. :”> Hopefully the information is useful for you.

Honestly spoken I don’t want to have a stronger CAPTCHA as it also constrains desired people while registration process. And most of all I don’t have the feeling that it will help a lot in fighting with the undesired.

However, will keep you updated.

Thanks again and have a nice day. Enni

By: Raz

Raz — Wed, 24 Oct 2007 09:19:55 +0000

Dear Enni,

Thank you for your detailed informations and for keeping me updated, they will help me out in the process of improving this little project for spam fighting. On my to do list I will include a user “black” list for registration/login IP/Browser/Domain/Name pattern match. It may not stop all of them but you will have more control over them.
Have a nice and spam-free day

Raz

By: Enni

Enni — Wed, 24 Oct 2007 09:38:31 +0000

Thank you!

By: Enni

Enni — Wed, 24 Oct 2007 12:06:38 +0000

Raz, before you are overloaded with work: I just was in contact with the forum developer. In the latest version of his plugin he added some simple calculation as spam protection option which is automatically been used for the WP registration!

That version I’m using only with another website and indeed for that I don’t get that much spam registrations. First I thought the reason was a different one but now it seems that’s the main one.

For you it means: you don’t have to add complex items to your plugin which uses plenty of your time. The plugin probably works very well for users who don’t use a forum.

As I promised I will keep you updated and let you know about my experiences once I have upgraded my private site to WP 2.3 plus the latest version of the forum.

Bye for now but not forever.

Enni

By: Raz

Raz — Fri, 26 Oct 2007 10:05:24 +0000

Thanks Enni, current version of the plugin doesn’t work with v2.3 as reported/fixed above by m1chu (thanks!) , I’ll update the plug with more features and the fix for wp 2.3 as soon as I get my hands on some free time, till then you may “hack” the plug a “little bit” to work with your wordpress 2.3 installation

Thanks again for your feedback
Raz

By: m1chu

m1chu — Fri, 26 Oct 2007 10:22:33 +0000

No problem
I was testing my exchange on your mod (this from my last entry) in Wordpress 2.3 version and it’s should works fine. I think it may help you in your works with update.

m1chu

By: Marc

Marc — Thu, 01 Nov 2007 13:01:41 +0000

Thanks, this is a really good plugin and it works, no spam anymore!!!

By: Matt

Matt — Sat, 03 Nov 2007 01:14:21 +0000

Hi Raz

Excellent plugin. I have one small problem that I’d like to get to the bottom of.

Google is indexing raz-captcha.php often with interesting results, for example http://www.myhappymedium.net/wp-content/plugins/raz-captcha/raz-captcha.php?captchagen= sometimes returns a captcha image on a page (nothing else) and sometimes returns a headers already sent error.

I would be happy to provide more info if need be. I know I can stop google from indexing these pages but just wondered what was happening? A quick Google suggests a few people have the same problem (or maybe its not a problem!)

Thanks and keep up the great work

By: Raz

Raz — Sat, 03 Nov 2007 08:29:33 +0000

Hi Matt,

Thanks for your feedback. My guess is that google ‘thinks’ it’s a standard image and he will add it to his database… erros are displayed because the script is accessed directly and vars are not ready yet. Sometimes you can see the image generated because the session was already initialized in your browser. It’s not a problem as far as I can see, it’s just a small glitch which I intend to fix

I will add in the feature versions additional checks to show some standard errors or not let google crawl to the script …

Not sure if this will do the trick but you can add the below lines in your Robots.txt file to disallow crawlers from accessing the captca script:

User-agent: *
Disallow: /*raz-captcha*

Have a nice day

@Marc: Thanks for your feedback, glad it works

By: Narcis Garcia

Narcis Garcia — Thu, 20 Dec 2007 19:51:23 +0000

- Will this plugin can be used to filter anonymous comments?
- Which CAPTCHA plugin are you using here?
- How can I customize the message “Please enter the code shown above:” ?

Thanks a lot.

By: Narcis Garcia

Narcis Garcia — Thu, 20 Dec 2007 19:54:23 +0000

- Will this plugin can be used to filter comments in Wordpress?
- Which plugin are you using here?
- How can I customize the message “Please enter the code shown above:” ?

By: Raz

Raz — Sat, 22 Dec 2007 16:19:26 +0000

Hi Narcis Garcia ,

1) It doesn’t filter the wordpress comments, it’s only used on register and login forms of your blog to stop automatically registrations with spam bots
2) On the plugin comment I use the same plugin, Raz-Captcha, it’s in beta stage not released yet, work in progress
3) It can’t be customized from the plugin config window, yet …

By: Nisse

Nisse — Mon, 31 Dec 2007 12:20:51 +0000

Hello!
I have i separate comment.php and the only thing I want is to put a CAPTCHA for the commnets.

I have no registration and no login.

Which code will I put where?

And - of cource - Happy New Year!

By: Raz

Raz — Wed, 02 Jan 2008 12:35:58 +0000

Hi Nisse, raz-captcha doesn’t support wp comments form yet, I will release an update for this plugin which includes captcha test on comments as well . But that will happen when I’ll get back home from vacation, if you want a beta (the same used on my comments form here) let me know

Happy New Year!

By: Nisse

Nisse — Wed, 02 Jan 2008 17:59:25 +0000

Raz:
Hi, yes I want your beta, thanks.

Regards.

By: Lesiu

Lesiu — Tue, 08 Jan 2008 17:11:18 +0000

Which captcha algorithm do you suggest to use? Which one is the strongest against bots and spammers? By the way, you wrote that you use PNG-GOTCHA on your blog but it looks absolutely different than GOTCHA image generated with your plugin.

By: Raz

Raz — Tue, 08 Jan 2008 18:46:44 +0000

Hi Lesiu,
My best guess is on the GOTCHA algorithm: it features different font for each character, sizes, colors, grid and it’s more human readable. When I’ve wrote this post GOTCHA algorithm was set on my blog and because I’ve made some changes to the plugin core (to include a captcha image on comments as well) I’ve switched to a weakest one: JPG-Tini Mini. This one proved not to be that weak, it works just great for both comments and registrations. So peek any captcha engine and give it a try

By: Lesiu

Lesiu — Wed, 09 Jan 2008 10:55:30 +0000

Raz, this GOTCHA is so strong, that people might have some trouble reading it. Maybe this is the way it should be.

By: Raz

Raz — Wed, 09 Jan 2008 11:13:11 +0000

The image can be refreshed/re-generated on click if the image generated with PNG-GOTCHA (or any other engine) is not to human readable, it’s up to you to use it or not. The most readable and a little week against ocr spammer geeks is the JPG-Tini Mini and PNG-phpBB3 8bit Grey engines.
Good luck.

By: Lesiu

Lesiu — Wed, 09 Jan 2008 12:14:19 +0000

Yes, I know that I have to click to refresh it. Raz, it’s really good plugin for WP, that’s for sure. I just wrote about troubles, because I had some. I think the best way to use it is just to implement it only on registeration page. If a human wants to register, he will succeed.

By: 断桥诗轩 » Blog Archive » 10 Ways to Secure your Wordpress Install

断桥诗轩 » Blog Archive » 10 Ways to Secure your Wordpress Install — Thu, 17 Jan 2008 06:36:18 +0000

[…] to hunt down a captcha solution for the comments, but I do have captcha in place for logins with Raz-Captcha and my contact form with Contact Form 7. This keeps bots from spamming and trying to crack your […]

By: dqj

dqj — Sat, 19 Jan 2008 20:22:42 +0000

Hi -

I am a bit new to Wordpress, but I am a seasoned programmer and PHP hacker. I was sondering if your code can or will soon work within the Ajax sidebar login plugin? Using the mini-jpg there would be great!

Thankss.

By: Krystal

Krystal — Thu, 24 Jan 2008 03:12:03 +0000

Hi There I have been using Raz for about 3 months on WP 2.2.2 without problems but recently the image box thingy has gone black so no one can read it!! I tried a fresh install same deal. Please help as this seriously affects my site.

Oh and to dqj - I use ’sidebar login’ with Raz-captcha and a custom login page as well and it (until now) works just fine!!

By: Raz

Raz — Thu, 24 Jan 2008 08:08:42 +0000

Hi Krystal,

Try another engine, I’m not sure what is going on, it should not generate black image unless modifications where done to the captcha generator, let me have a look at your blog, give me a link .
Here is the latest beta build, not released yet do to lack of time (not all plans finished), give it a try and let me know how it works on your side.

By: Some useful WordPress plugins | Cyde Weys Musings

Some useful WordPress plugins | Cyde Weys Musings — Thu, 31 Jan 2008 23:32:44 +0000

[…] Raz-Captcha adds a CAPTCHA to user login and/or user registration. I just have it turned on for registration, because too many spammers were automatically registering accounts in the vain hope that being logged in would let their spammy comments through my spam filter (it didn’t). […]

By: Narcis Garcia

Narcis Garcia — Mon, 04 Feb 2008 15:51:24 +0000

Will you announce the new release of Raz-Captcha in this page? Should I track this post to detect the new version?

Thanks for the work.

By: ovizii

ovizii — Mon, 18 Feb 2008 08:49:46 +0000

I have the same problem, the image does not appear and once I log out, I have to delete the raz folder from the server to be able to log in again. I will activate it now, here: http://pacura.ru so you can have a look.

My server fulfills all prerequisites, aka freetype GD, etc.

using wordpress 2.3.3

By: ovizii

ovizii — Mon, 18 Feb 2008 08:58:22 +0000

tiny mini works although I have:
Server Settings

* Operating System : Linux
* Server : Apache/2.2.3 (Debian) mod_fastcgi/2.4.2 mod_ssl/2.2.3 OpenSSL/0.9.8c
* Memory usage : 12.8 MByte
* MYSQL Version : 5.0.32-Debian_7etch5-log
* SQL Mode : Not set
* PHP Version : 4.4.4-8 etch4
* PHP Safe Mode : Off
* PHP Allow URL fopen : On
* PHP Memory Limit : 128M
* PHP Max Upload Size : 32M
* PHP Max Post Size : 32M
* PHP Max Script Execute Time : 120s
* PHP Exif support : Yes ( V1.4 )
* PHP IPTC support : Yes
* PHP XML support : Yes

GD support

* GD Version : 2.0 or higher
* FreeType Support : Yes
* FreeType Linkage : with freetype
* T1Lib Support : Yes
* GIF Read Support : Yes
* GIF Create Support : Yes
* JPG Support : Yes
* PNG Support : Yes
* WBMP Support : Yes
* XBM Support : No
* JIS-mapped Japanese Font Support : No

By: peter

peter — Wed, 20 Feb 2008 01:29:05 +0000

When activated if new user registers, if using a name already registered the original name gets over writen

By: Raz

Raz — Wed, 20 Feb 2008 07:59:34 +0000

@Narcis Garcia: new releases will be announced on site, as a new post/thread, get the site rss feed here or register here for news. Or check this post comments for beta builds and/or quick fixes

@ovizii: are you trying the beta build? not sure what is going on

@peter: It looks like a bug, it doesn’t get overwrited on my side but you will not get the standard error “user already registered”, that is strange, thanks for your bug report, will be fixed in the next build…

By: Raz

Raz — Wed, 20 Feb 2008 08:48:09 +0000

When activated if new user registers, if using a name already registered the original name gets over writen

Just Fixed, please re-download the latest beta build here and give it a try (just overwrite your existing files), it should now show the standard wordpress errors as usual on registration errors.
Thanks

By: Narcis Garcia

Narcis Garcia — Wed, 20 Feb 2008 09:14:15 +0000

Affects this bug to the stable version?

By: Raz

Raz — Wed, 20 Feb 2008 09:23:09 +0000

Yes it does, this bug is from the first release of this plugin, I encourage you to use the latest build, it also introduces captha check on comments, very good against comments bots (not useful for trackbacks tho, but a decent spam filter such as Akimset should suffice for trackbacks) .
Good luck

By: albertcito

albertcito — Tue, 04 Mar 2008 01:06:13 +0000

Excelente plugin, era casi lo que buscaba. Me interesaría que la persona que se registre pueda ser author. gracias.

By: Raz

Raz — Tue, 04 Mar 2008 08:49:30 +0000

Hi albertcito,
Thanks for your feedback, didn’t quite understand what you’re “interesaría”. English please

By: Narcis Garcia

Narcis Garcia — Thu, 06 Mar 2008 10:39:16 +0000

Albercito said: Excellent plugin, it was almost what I was looking for. I wish who registers could be author. thanks.

By: » wordpress captcha plugins » NEON BLOG

» wordpress captcha plugins » NEON BLOG — Fri, 14 Mar 2008 13:11:06 +0000

[…] nebeneinander. mit dem tool simple captcha schütze ich den kommentarbereich und das plugin raz-captcha verhindert die anmeldung von robots. simple captcha ist tatsache recht einfach und bietet keinerlei […]

By: Max Kima

Max Kima — Mon, 24 Mar 2008 14:03:03 +0000

I used Akismet and this one! Like them both! Thanx for the site!

By: Anonymous

Anonymous — Tue, 25 Mar 2008 09:20:20 +0000

I sed it too! Really good

By: andrew

andrew — Mon, 31 Mar 2008 06:52:44 +0000

Still works with 2.5 with one bug.

For the Logon protection. If they type in the wrong code you get an error.

By: ljmacphee

ljmacphee — Fri, 04 Apr 2008 00:14:05 +0000

I’m getting an error since upgrading to WP 2.5

[13-Mar-2008 17:03:01] WordPress database error Table ‘mobile.wp_options’ doesn’t exist for query SELECT option_value FROM wp_options WHERE option_name = ’siteurl’ LIMIT 1

The plugin still works, so I guess it is a warning not an error message.

Is this an easy fix for you?

Thanks for the plugin, I can’t tell you how many hours of sorting through bot registrations it saves me!

By: ljmacphee

ljmacphee — Fri, 04 Apr 2008 00:15:45 +0000

Sorry - wrong error - it’s been a long day!

[01-Apr-2008 10:56:51] PHP Fatal error: Cannot use object of type WP_Error as array in /home/directory/public_html/website/wp-content/plugins/raz-captcha/raz-captcha.php on line 633

By: andrew

andrew — Wed, 09 Apr 2008 06:25:28 +0000

That error is the same i’m getting. It only if you type in the CAPTCHA code in wrong. But at least isn’t not fatal.

By: Raz

Raz — Wed, 09 Apr 2008 11:05:27 +0000

Hi all and thanks for your feedback

Things changed inside last wp version, i’ll get this plugin updated as soon as I’ll get enough time to “dig inside” the new wp version not sure when tho…

Thanks

By: Captcha Plugin für die Registrierung und den Login bei Wordpress im Leben des wolf-u.li

Sat, 12 Apr 2008 12:44:33 +0000

[…] nicht einschaltet (schade…) musste eine andere Lösung her. Die Lösung heisst “Login and Register Anti-Spam Captcha” und bietet einen Captcha (Completely Automated Public Turing test to tell Computers and […]

By: PNOOZ

PNOOZ — Thu, 17 Apr 2008 19:09:09 +0000

Is it possible to have the “Captcha engine” option in the “Raz-Captcha Options” page default to PNG-Raz Mixed Fonts or one of the others besides PNG-GOTCHA? If so, please porvide document and line.

Thanks for your excellent work!

By: Kalina

Kalina — Mon, 21 Apr 2008 06:16:13 +0000

Very nice, thank you, I can’t wait to try it out. Sorry I replied on the other post, not realizing the date.

By: Axel

Axel — Mon, 28 Apr 2008 22:04:47 +0000

After moving to a new server (database backup), the plugin shows the following error:

Warning: Cannot use a scalar value as an array in /var/www/web110627/html/wp-content/plugins/raz-captcha/raz-captcha.php on line 590

By: MarkRH

MarkRH — Tue, 29 Apr 2008 05:55:16 +0000

After upgrading to WordPress 2.5.1, I am getting a blank white page when trying to login. The following php error is generated:

PHP Fatal error: Cannot use object of type WP_Error as array in /home/(deleted)/public_html/blog/wp-content/plugins/raz-captcha/raz-captcha.php on line 590

Server was recently upgraded to PHP 5.2.5 as well.

I had to rename the raz-captcha directory so I could re-log into WordPress. Not sure if the new version of WordPress or PHP version is causing the problem.

By: Login und Register Anti Spam Captcha - WordPress Plugin » Der Webmaster Watchblog

Fri, 02 May 2008 20:50:09 +0000

[…] zur Plugin-Homepage Series Navigation Kategorien: HinweiseTags: Captcha, plugins, Wordpress Über den […]

By: MacBros

MacBros — Fri, 09 May 2008 04:16:23 +0000

Latest version of Wordpress doesn’t like this plug in.

Get a 500 error when trying to log in now. Had to disable the plugin in order to write posts.

Please update the plugin please. Nothing I hate worse is spammers trying to create fake registrations.

By: MacBros

MacBros — Fri, 09 May 2008 04:19:12 +0000

PHP 5 here BTW too.

By: Raz-Captcha (Wordpress anti-spambot plugin) na m1chu.eu - another devblog

Raz-Captcha (Wordpress anti-spambot plugin) na m1chu.eu - another devblog — Fri, 09 May 2008 21:33:34 +0000

[…] z wyżej podanego powodu wprowadziłem gotowe rozwiązania, a mianowicie m.in. Raz-Captcha. Część osób miało problem z systemem weryfikacji graficznej, które autor modyfikacji w dziwny […]

By: Steph

Steph — Tue, 20 May 2008 21:07:21 +0000

The registration page looks fine, but the login page now throws this error:
Fatal error: Cannot use object of type WP_Error as array in /home/seethehu/public_html/wp-content/plugins/raz-captcha/raz-captcha.php on line 590

By: Steph

Steph — Tue, 20 May 2008 21:38:11 +0000

Also, the logout page throws same error (this is on different blog, same host):
Fatal error: Cannot use object of type WP_Error as array in /home/seethehu/public_html/tuscolamops/wp-content/plugins/raz-captcha/raz-captcha.php on line 590

By: MacBros

MacBros — Tue, 20 May 2008 21:44:00 +0000

I got the same thing when upgrading to 2.5.
I had to drop the plug-in altogether and go for Register Plus, IMO better anyway.
http://skullbit.com/wordpress-plugin/register-plus/

By: hubevolution

hubevolution — Wed, 28 May 2008 08:41:52 +0000

function check_captcha_login($user)
{
reget_session_options();
if ($_SESSION[’rca_ses_option’][’rca_login’])
{
global $error;
$err=check_captcha();
$wz_err = new WP_Error();

if ($err) {
$error=$err;
$wz_err->add(’error’,__(’WRONG CODE’));
return $wz_err;
}

return $user;
}

}

I hope this helps and ofcourse RAZ you can release this patch with a new version of this great plugin

By: hubevolution

hubevolution — Wed, 28 May 2008 08:45:39 +0000

sorry you can delete previous comment is a wrong post here it is full version :

I found a solution to make this plugin work under 2.5.1 WP , in file raz-captcha.php in wp-content/plugins/raz-captcha/ just do the following :

search for line :

add_action(’wp_authenticate’, ‘check_captcha_login’);

and replace with this one :

add_action(’wp_authenticate_user’, ‘check_captcha_login’);

then search for line :

function check_captcha_login()

and replace ALL the function code with this one :

function check_captcha_login($user)
{
reget_session_options();
if ($_SESSION[’rca_ses_option’][’rca_login’])
{
global $error;
$err=check_captcha();
$wz_err = new WP_Error();

if ($err) {
$error=$err;
$wz_err->add(’error’,__(’WRONG CODE’));
return $wz_err;
}

return $user;
}

}

I hope this helps and ofcourse RAZ you can release this patch with a new version of this great plugin

By: Axel

Axel — Wed, 28 May 2008 13:00:21 +0000

@hubevolution:
With that change I’m unable to reactivate the plugin: It produces a fatal error in line 594, an “unexpected T String”:
$wz_err->add(’error’,__(’WRONG CODE’));

By: hubevolution

hubevolution — Wed, 28 May 2008 14:13:37 +0000

quite strane it works fine for me are you in php4 or php5 ? I am on php5 , well actually you can try this way :

$wz_err->add(’error’,’WRONG CODE’);

$wz_err->add(’error’,’’);

let us know

By: Axel

Axel — Wed, 28 May 2008 19:17:30 +0000

MySQL Client 5.0.32

The first line produces the same Parse error (unexpected T String). The second one seems to work at first, but after activating the plugin, it doesn’t generate any images, neither on the config page nor when registering as a new user.
Another problem of this is that I cannot login anymore when the plugin is active now. The system shows a “wrong password” message.

By: OJWay

OJWay — Mon, 02 Jun 2008 06:36:44 +0000

Confirming Axel - I did exactly what he did and I’m in the same place!

By: hubevolution

hubevolution — Tue, 03 Jun 2008 07:09:10 +0000

well we have to understand where is the difference between your environments and mine since I am using it on wordpress 2.5.1 without any problem.

I have uploaded my raz-captcha modded plugin here can you test it please ?

http://www.filefactory.com/file/cf4f9f/

thanks

By: Axel

Axel — Tue, 03 Jun 2008 10:49:12 +0000

same problem: plugin can be activated and adjusted but does not generate images.

By: 10 Ways to Secure your Wordpress Install | Hackosis

10 Ways to Secure your Wordpress Install | Hackosis — Thu, 12 Jun 2008 17:27:53 +0000