diff options
| -rw-r--r-- | inc/config.php | 4 | ||||
| -rw-r--r-- | inc/ic-encrypt.php | 39 | ||||
| -rw-r--r-- | inc/imgcaptcha.php | 126 | ||||
| -rw-r--r-- | templates/post_form.html | 2 |
4 files changed, 170 insertions, 1 deletions
diff --git a/inc/config.php b/inc/config.php index b4039061..ff4637ec 100644 --- a/inc/config.php +++ b/inc/config.php @@ -269,6 +269,10 @@ $config['imgcaptcha_list'] = "/sciezka/do/pliku.txt"; $config['imgcaptcha_images'] = "/sciezka/do/obrazkow"; // without a slash at the end $config['imgcaptcha_question'] = "Was ist das?"; + $config['imgcaptcha_time_limit'] = 90; // Kapcza wazna przez 90 sekund po wejsciu + $config['imgcaptcha_filler'] = "/plik/kliknijmie.png"; + $config['imgcaptcha_width'] = 128; + $config['imgcaptcha_height'] = 96; /* * ==================== * Post settings diff --git a/inc/ic-encrypt.php b/inc/ic-encrypt.php new file mode 100644 index 00000000..c0f499bd --- /dev/null +++ b/inc/ic-encrypt.php @@ -0,0 +1,39 @@ +<?php +// Z internetow. +class Encryption { + var $skey = $config["imgcaptcha_key"]; + + public function safe_b64encode($string) { + $data = base64_encode($string); + $data = str_replace(array('+','/','='),array('-','_',''),$data); + return $data; + } + + public function safe_b64decode($string) { + $data = str_replace(array('-','_'),array('+','/'),$string); + $mod4 = strlen($data) % 4; + if ($mod4) { + $data .= substr('====', $mod4); + } + return base64_decode($data); + } + + public function encode($value){ + if(!$value){return false;} + $text = $value; + $iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB); + $iv = mcrypt_create_iv($iv_size, MCRYPT_RAND); + $crypttext = mcrypt_encrypt(MCRYPT_RIJNDAEL_256, $this->skey, $text, MCRYPT_MODE_ECB, $iv); + return trim($this->safe_b64encode($crypttext)); + } + + public function decode($value){ + if(!$value){return false;} + $crypttext = $this->safe_b64decode($value); + $iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB); + $iv = mcrypt_create_iv($iv_size, MCRYPT_RAND); + $decrypttext = mcrypt_decrypt(MCRYPT_RIJNDAEL_256, $this->skey, $crypttext, MCRYPT_MODE_ECB, $iv); + return trim($decrypttext); + } +} +?> diff --git a/inc/imgcaptcha.php b/inc/imgcaptcha.php new file mode 100644 index 00000000..dae42752 --- /dev/null +++ b/inc/imgcaptcha.php @@ -0,0 +1,126 @@ +<?php + // Wiem, ze ten kod to czysta ohyda. Coz. + require("ic-encrypt.php"); + function getImages() { + $lines = split("\n",file_get_contents($config["imgcaptcha_list"])); + for($i=0;$i<count($lines);$i++) { $lines[$i] = split(",",$lines[$i]); } + return $lines; + } + function getIPath($img) { + return $config["imgcaptcha_images"] . "/" . $img; + } + function pickImage($lines) { + $src = FALSE; + while($src == FALSE) { + $pick = rand(0,count($lines)-1); + $src = imagecreatefrompng(getIPath($lines[$pick][0])); + } + imagedestroy($src); + return $pick; + } + function ncfix($a) { + if($a>255) { return 255; } + if($a<0) { return 0; } + return $a; + } + function randString($length, $charset='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+=') + { + $str = ''; + $count = strlen($charset); + while ($length--) { + $str .= $charset[rand(0, $count-1)]; + } + return $str; + } + function generateCaptchaHash() { + $lines = getImages(); + $pick = pickImage($lines); + $enctext = $pick . ",," . time() . ",," . $_SERVER["REMOTE_ADDR"] . ",," . randString(12); + $converter = new Encryption; + return $converter->encode($enctext); + } + function ac_verifyHash($enctext, $output) { + //print "VERIFY: " . $enctext . " " . $output . "<br>"; + $converter = new Encryption; + $dectext = split(",,",$converter->decode($enctext)); + if(count($dectext)<4) return true; + $lines = getImages(); + $pick = $dectext[0]; + $time = time()-$dectext[1]; + if($time>$config["imgcaptcha_time_limit"]) return true; + $lp = $lines[$pick]; + for($i=1;$i<count($lp);$i++) { + if(strcasecmp($lp[$i],$output)==0) return false; + } + return true; + } + function getPick($enctext) + { + $converter = new Encryption; + $dectext = split(",,",$converter->decode($enctext)); + if(count($dectext)<=1) return; //SC + $lines = getImages(); + return $dectext[0]; + } + function generateImage($enctext) + { + $lines = getImages(); + $pick = getPick($enctext); + if(!isset($lines[$pick])) return; //SC + $src = imagecreatefrompng(getIPath($lines[$pick][0])); + if($src == FALSE) return; //SC + $maxc = 8; + $icw = $config["imgcaptcha_width"]; + $ich = $config["imgcaptcha_height"]; + $dst = imagecreatetruecolor($icw,$ich); + $srcxm = imagesx($src)-$icw; + $srcym = imagesy($src)-$ich; + $srcx = rand(0,$srcxm-1); + $srcy = rand(0,$srcym-1); + imagecopy($dst,$src,0,0,$srcx,$srcy,$icw,$ich); + + // Obfuscation step 1 + imagecopymergegray($dst,$dst,0,0,0,0,$icw,$ich,rand(20,45)); + // Obfuscation step 1.5 + for($i=0;$i<8;$i++) { + $w = rand(5,10); $h = rand(5,10); + $x = rand(0,$icw-1-$w); $y = rand(0,$ich-1-$h); + $x2 = rand(0,$icw-1); $y2 = rand(0,$ich-1); + imagefilledrectangle($dst,$x,$y,$x+$w,$y+$h,imagecolorat($dst,$x2,$y2)); + } + for($i=0;$i<5;$i++) { + $w = rand(20,40); $h = rand(20,40); + $x = rand(0,$icw-1-$w); $y = rand(0,$ich-1-$h); + imagecopymergegray($dst,$dst,$x,$y,$x,$y,$w,$h,0); + } + // Obfuscation step 2 + for($i=0;$i<$icw*$ich;$i++) { + $x = $i%$icw; $y = $i/$icw; + $c = imagecolorat($dst,$x,$y); + if(rand(0,4) == 2) { $nc = $c ^ rand(0,16777215); } + else { $nc = imagecolorat($dst,rand(0,$icw-1),rand(0,$ich-1)); } + if(rand(18,24)!=21 and $c != 0 and $c != 0xFF00FF) + { + $nc = ncfix(($c&0xFF) + rand(-16,16)) | ncfix((($c>>8)&0xFF) + rand(-8,8))<<8 | ncfix((($c>>16)&0xFF) + rand(-32,32))<<16; + $nc1 = $nc&0xFF ^ ($nc>>8)&0xFF ^ ($nc>>16)&0xFF; + } else { + $nc1 = $nc&0xFF; + if($nc1>($maxc*25)) $nc1 = $nc % ($maxc*25); + } + $nc2 = $nc1 | $nc1<<8 | $nc1<<16; + if(rand(0,1)==0) $nc2=$nc; + imagesetpixel($dst,$x,$y,$nc2); + } + // Obfuscation step 3 + for($i=0;$i<rand(10,30);$i++) { + $x1 = rand(0,$icw-1); $x2 = rand(0,$icw-1); $y1 = rand(0,$ich-1); $y2 = rand(0,$ich-1); + $color = imagecolorallocate($dst, rand(0,$maxc)*25, rand(0,$maxc)*25, rand(0,$maxc)*25); + imageline($dst,$x1,$y1,$x2,$y2,$color); + } + + imagepng($dst); + } + //header('Content-Type: image/png'); + //$t = generateCaptchaHash(); + //generateImage($t); +?> diff --git a/templates/post_form.html b/templates/post_form.html index af8b22a7..ca5c7e12 100644 --- a/templates/post_form.html +++ b/templates/post_form.html @@ -66,7 +66,7 @@ </th> <td> <input type="hidden" name="imgcaptcha_hash" id="imgcaptcha_hash" value="kucaj stad, kucu hakierze"> - <img src="" width="128px" height="96px" id="imgcaptcha_img"></img><br> + <img src="{% config.imgcaptcha_filler %}" width="{% config.imgcaptcha_width %}px" height="{% config.imgcaptcha_height %}px" id="imgcaptcha_img"></img><br> {% config.imgcaptcha_question %} <input type="text" name="imgcaptcha_verify" id="imgcaptcha_verify" value=""></input><br> <a href="javascript:ic_odswiezKapcze()">Odswiez</a> {{ antibot.html() }} |