Demo Joomla! 1.5

Visit the Joomla! 1.5 demo site to see my extensions live running

Demo Joomla! 2.5

Visit the Joomla! 2.5 demo site to see my extensions live running

Support

Do not submit a bug report if you need technical support or have questions.

Forums

Post your suggestions ask for help in the community forums

Wiki

Visit the Wiki extensive and up to date documentation at your fingertips.

Contact Me

Missing images/links, any comments, suggestions, need help? Contact me

Skype

Need desperately help?
Skype Me™! But dont abuse of it!

Sporadic bugs appearing in SecurityImages 3.0.4?

User Rating:  / 0
PoorBest 
I've getting now many emails and bugs reports about security images 3.0.4. After looking closely at the source code and trying to reproduce those problems, I finally found the bug.
In fact this component is now a victim of its success, using it everywhere has also revealed a serious design flaw, but let me explain....
Security Images is using 2 hidden fields in the background:
  • Security_try which contains the text entered by the user
  • Security_refid, which contains a UUID which will be use or not (depending on the Plugin) to locate the private key in the database or session.
And these hidden fields names are spread in the code... this let the horror scenario happen:
If you have many securityimages (captcha images) generated in the same page: login module may have one, Guestbook may have one for example, the code wont work!

The browser will submit all Hidden fields which are in the form, and thus the first input text box (Security_try) may overwrite what the user has entered in another one...rejecting always the user as a result.

Solutions
  1. Prio 1: framework has to be configurable from the outside,
  2. Prio 1:  Free porn attack counter measures will be add to HNCapctha Plugin
Release

3.0.5 (Patch)
  • Free porn attack counter measures will be add to HNCapctha Plugin.
4.0.0 will have non compatible API changes
You will have to change some 3rd party components, but I will support following 3rd party components:
  • com_contact (Joomla core)
  • com_login (Joomla core)
  • com_registration (Joomla core)
  • akobookPlus
  • akoCommenPlus
Other like Community Builder, Galleries, JoomlaBoard will have to be supported by their own authors. Please contact them about that issue, I will document how to use the 4.0 in my wiki.

Other new functionnalities will be add to the 4.0 releases soon. (You can submit your ideas here)

Since it is raining over there :-( , it is realistic to see the version 4.0.0 before monday 29.05.2006

AkobookPlus new languages files:



You might also like:
Nasty Bug in SecurityImages 5.1.2
258 days ago
Nasty Bug in SecurityImages 5.1.2
Thanks to Margus Pala, a security Flaw has been reported and corrected in SecurityImages version 5
HOW to make your own patches for securityimages
916 days ago
HOW to make your own patches for securityimages
Just in case I take too much time to deliver a ready to use download, duration 5 minutes, but you ne
Joomla_1.5.13-Stable-Full_PackageForSecurityImages5.1.x_v01.
926 days ago
Joomla_1.5.13-Stable-Full_PackageForSecurityImages5.1.x_v01.
Only for SecurityImages 5.1.x and Joomla! 1.5.13 Allow login views, login modules, register, lost
Joomla_1.5.12-Stable-Full_PackageForSecurityImages5.1.x_v01.
948 days ago
Joomla_1.5.12-Stable-Full_PackageForSecurityImages5.1.x_v01.
Only for SecurityImages 5.1.x and Joomla! 1.5.12 Allow login views, login modules, register, lost
blog comments powered by Disqus
Parent Category: Extensions
Category: SecurityImages

Donations

Thank You for supporting my work

Follow Me

Follow cedricwalter on Twitter Subscribe via RSS Subscribe via RSS Follow us on Facebook Follow us on Google+

Latest Articles

  • Thanks to Nathan Rennie-Waldock. you can have the latest PHP5 5.3.10 running in Ubuntu Oneiric, Natty, Maverick and Lu... ...
  • Download and install the latest  VMware Player 4.0.2 to run this Virtual Appliance “Ubuntu 11.10 x64 Server” ... ...
  • Download and install VMware Player 4.0.2 to run this Virtual Appliance “Ubuntu 11.10 x64 Server” Ready to user st... ...
  • Thanks to Ondřej Surý,  maintainer for some Debian packages, you can have the latest PHP5 maintained by Debian ... ...
  • Munin is a networked resource monitoring tool that can help analyze resource trends and "what just happened to ki... ...

Latest Comments

Popular Posts

rockettheme advertisement

dropbox logo

Help Us & Leave Feedback!

  • Do you have an excellent article idea you would like to read about here? Share it!
  • Do you have some interesting tips how we could improve our site?
  • Something missing here? Help us make this blog a better place, leave feedback!
We would love to hear from you! Be active! Write us now!

Blogs

Didier Beck Tech Head Brothers

google+ badge