Changes between Version 7 and Version 8 of MathCaptchaPlugin
- Timestamp:
- May 14, 2022, 5:50:33 AM (2 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
MathCaptchaPlugin
v7 v8 5 5 == Description 6 6 7 This plugin presents an anonymous user with simple math addition problems in order to submit a new ticket or to make edits in the wiki. Currently there is no customization: it presents two integers in the range of 1 - 10 and asks the user to add them together.7 This plugin presents an anonymous user with a simple math addition problem on a new ticket or wiki edit page prior to submission. This presents a protection from unwanted bots making posts on your Trac website. Currently there is no customization: it picks two integers in the range of 1 - 10 and asks the user to add them together and submit the result. 8 8 9 9 === Version 2.0 10 10 11 I'm starting to see some particular spambots get through the simple captcha, so I'm releasing version 2.0 that includes a slight modification to the format presented to the user. In addition, this version now correctly works with fcgi and mod_python by saving the captcha information in the trac database. To use mod_python as an example: Apache may start many processes where each has its own embedded Python interpreter. The particular Apache process that displayed the form may not be the same one that processes the form request, so there must be a persistent way to store the solution to the captcha rather than making it easy for spambots by encoding the solution in the web page itself.11 I'm starting to see some particular spambots get through the simple captcha, so I'm releasing version 2.0 that includes a slight modification to the format presented to the user. In addition, this version now correctly works with fcgi and mod_python by saving the Captcha information in the Trac database. To use mod_python as an example: Apache may start many processes where each has its own embedded Python interpreter. The particular Apache process that displayed the form may not be the same one that processes the form request, so there must be a persistent way to store the solution to the Captcha rather than making it easy for spambots by encoding the solution in the web page itself. 12 12 13 I'm also keeping a 30 day record of failed attempts in the same database so you can get an idea of what sort of spambots are trying to get through your defenses.13 I'm also keeping a 30 day record of failed attempts in the same database, so you can get an idea of what sort of spambots are trying to get through your defenses. 14 14 15 For the future, would be nice if there were multiple types of math problems presented in a way that wouldn't be easy for a bot to recognize.15 For the future, it would be nice if there were multiple types of math problems presented in a way that wouldn't be easy for a bot to recognize. 16 16 17 17 == Bugs/Feature Requests … … 40 40 }}} 41 41 42 Version 2.0 of the plugin creates a new database needed for processing captchas when run using fcgi or mod_python, so you'll have to run the following before you can use the plugin:42 Version 2.0 of the plugin creates a new database needed for processing Captchas when run using fcgi or mod_python, so you will have to run the following before you can use the plugin: 43 43 {{{#!sh 44 44 trac-admin /path/to/project/environment upgrade … … 57 57 * `WIKI_MODIFY` 58 58 59 Anonymous users will then be prompted to solve a math problem before being allowed to submit it, while authenticated users will not see the captcha.59 Anonymous users will then be prompted to solve a math problem before being allowed to submit the ticket or wiki edit, while authenticated users will not see the Captcha. 60 60 61 61 == Recent Changes