Re: Going from simple to super CAPTCHA

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 6/12/07, Robert Cummings <robert@xxxxxxxxxxxxx> wrote:
On Tue, 2007-06-12 at 15:46 +0200, Tijnema wrote:
> On 6/12/07, Robert Cummings <robert@xxxxxxxxxxxxx> wrote:
> > On Tue, 2007-06-12 at 15:23 +0200, Tijnema wrote:
> > > On 6/12/07, Stut <stuttle@xxxxxxxxx> wrote:
> > > > tedd wrote:
> > > > > At 7:38 PM +0200 6/11/07, Tijnema wrote:
> > > > >>>
> > > > >>
> > > > >> Well, if you think this is the uncrackable* solution, create it and
> > > > >> i'll see if I can crack it ;)
> > > > >>
> > > > >> Tijnema
> > > > >>
> > > > >> * I hope you don't mean the same uncrackable as AACS did:
> > > > >> "HD-DVD is uncrackable" ;)
> > > > >
> > > > >
> > > > > As I provided in another post, try cracking this:
> > > > >
> > > > > http://sperling.com/examples/dot-captcha/
> > > >
> > > > I've not written code to do it but that seems pretty simple to me. You
> > > > get the image from circle.php, detect where the circle is - pretty
> > > > simple - and pass those coords through when posting the form. Or have I
> > > > missed something?
> > > >
> > > > -Stut
> > > >
> > > Yup, it's as simpel like that, but I found an even simpler way,because
> > > there is a bug in Tedd's code :P
> > > You didn't check if the session variable is empty, so if i Pass an
> > > empty variable Submit.x and Submit.y to your script, it generates 2
> > > warnings, but tells me, Congratulations, you made it...
> > >
> > > To see the result, go here:
> > > http://86.86.80.41/dev/debug/tedd3.php
> > > To see the source of the code, go here:
> > > http://86.86.80.41/dev/debug/tedd3.phps
> >
> > Does it check specifically for Submit.x and Submit.y? or does my goof
> > script work if I put in the full URL? *heheeh*. I noticed he had that
> > bug too when I used wget to grab circle.php (the circle center was at
> > the origin), but wasn't sure if his validation code checked it (this was
> > after I sent my goof response :)
> >
> > Cheers,
> > Rob.
>
> Nope, it does actually check for Submit.x and Submit.y ;)

DOH! :)

Cheers,
Rob.

You seem pretty sure about it, what if he checks for Submit.y and Submit.x? :P:P
Tijnema

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux