Roundcube Community Forum

 

New reCAPTCHA plugin

Started by dennylin93, February 06, 2010, 08:19:05 AM

Previous topic - Next topic

dennylin93

Hi, I've written a plugin that shows a reCAPTCHA box after too many failed login attempts. The failed attempts are saved in SQL and purged after a certain amount of time.

Fixed issues:
  • MySQL and PostgreSQL are supported.
  • IPs aren't purged if user doesn't visit.
  • Users that fail reCAPTCHA aren't allowed to login. However, the method is crude and ugly.
  • Might conflict with the remember_me plugin.

The gzipped file: rcguard-0.2.0.tar.gz.

Also on GitHub: rcguard.

Comments and suggestions are welcome. This is my first plugin, so there probably are a lot of problems.

dennylin93

#1
All the issues should be fixed with this version: rcguard 0.2.0.

SKaero

Nice plugin, can you post some screenshots?

dennylin93

Sure, I've attached a screenshot of the login form.

lacri

great work plugin works fine !!!

many thanks

lacri

to change language in capchta
edit rcguard.js

and replace
var RecaptchaOptions = {
  
theme 'white'
};


with
var RecaptchaOptions = {
  
theme 'white',
  
lang 'de'
};


de for German

see here for more options
reCAPTCHA API Documentation

lacri

recaptcha dont display correct in some old Browsers IE6 IE7
to fix this edit rcguard.css and replace all with

@charset "utf-8";

#rcguard {
    
margin-bottom0px;
}

#recaptcha {
    
positionrelative;
}

dennylin93

#7
Hmm... Looks like we have a problem. The fix above doesn't work with Firefox. I'll try to find a solution that works with all browsers.

lacri

in my firefox works with this
tested with FF 3.6 and 3.5 IE6, IE7 and IE8, Opera 10, and Google Chrome tested with Windows 7 and XP and FF 3.6 under linux.

which FF version you use.

dennylin93

I'm using Firefox 3.6 and Opera 10 under FreeBSD.

hosenhans

Thank you very much for this wonderful plugin :-)

lacri

Hi dennylin93,

i have implement a little optimization to rcguard
this delete after successful login the mysql entry of this user from rcguard table.

see attachment

dennylin93

Thanks for the feedback.

I actually added this feature previously, but took it out later. If someone successfully hacks into an account, then the entry is deleted and he can skip the reCAPTCHA verification.

I think I'll add this as a tunable feature with on and off in the config file. I've been really busy recently, so I'll have to find some time to do this.

ontnugtering

#13
I have a problem: Recaptcha does simply not appear.

What I did: Created SQL tables, installed and activated the plugin, registered at recaptcha service, copied and configured config.inc.php with the pub and private keys... Hmmm.

EDIT: What's wrong? With phpmyadmin (I'm on a web hoster) I can see the MYsql rcguard table has NO entries...

EDIT2: SOLVED, I was stupid. I added the 'rcguard' entry to an outcommented plugins line (//) OMG ;) So, the plugin WORKS NICELY. THANKS!

lumen

I have problem: recaptcha not work.
Created SQL tables, installed and activated the plugin, registered at recaptcha service, copied and configured config.inc.php with the pub and private keys.