Security Code not showing up.

Posted: Tue Mar 13, 2007 6:08 am

Forgive me if this is the wrong topic in which to place this.

I'm converting my development site (i.e., this is not a production issue) from RN 2.02.02. The conversion went well. However, I'm not seeing the security code anywhere (e.g., admin.php, Your Account, etc.). I have $display_errors=TRUE, but am not seeing any error messages. When I set gfx_check to 0 in config.php, I am able to login in.

Is this a code issues or is my server lacking some underlying pre-requisite?

registered · Site Admin Joined: Jun 04, 2004 Posts: 6437

It does require the GD lib (PHP). Did you have security codes in 2.02.02? If you're using IE, do you see a red X where the image is supposed to be?

Posted: Tue Mar 13, 2007 6:24 am

Sounds like your GD is working (or was). I'm not as familiar with the changes as Raven or montego, but I'd check the installation to make sure all the files were installed.

registered · Posted: Tue Mar 13, 2007 7:18 am

webservant, I appologize for asking this, but are you certain that the $gfx_chk variable in config.php is set up right to see it? I mean if you had it before you should still have it. We did move the captcha on the New Registration to the Confirm page, so have you checked the basic login page to see if its there?

Also, since you have upgraded, did you have to make any merging of code? Maybe you missed something? Not sure, just something to consider.

Guest, you have hijacked webservant's thread. We'll try to help both of you, but you very well may have different issues causing this.

Posted: Tue Mar 13, 2007 7:34 am

Guest is me - not a hijack. I used quick reply (like now). I'm not sure if I was logged in or not. I am now, so we'll see if this is an issue on this site. I probably was not logged in on the machine from which I replied.

I have had to do some code merging, and will recheck, but in these modules, it was things like cookie timeouts. Does captcha and gfx run on the same base PHP code or is there a new feature involved that may not be working on my server? Which files/functions are involved in presenting the image, so I can narrow my search on this?

registered · Posted: Tue Mar 13, 2007 12:47 pm

What is the url it's showing for the image?

Posted: Tue Mar 13, 2007 2:37 pm

For this page: http://www.gracioustest.org/modules.php?name=Your_Account
The image is: http://www.gracioustest.org/images/captcha.php?size=normal

Posted: Tue Mar 13, 2007 2:41 pm

When I go to the image URL directly, I get this:

Quote:

Warning: imageftbbox(): No FreeType 2 support in this PHP build in /home/doulos/public_html/includes/class.php-captcha.php on line 298

Warning: imagefttext(): No FreeType 2 support in this PHP build in /home/doulos/public_html/includes/class.php-captcha.php on line 306

Warning: imageftbbox(): No FreeType 2 support in this PHP build in /home/doulos/public_html/includes/class.php-captcha.php on line 298

Warning: imagefttext(): No FreeType 2 support in this PHP build in /home/doulos/public_html/includes/class.php-captcha.php on line 306

Warning: imageftbbox(): No FreeType 2 support in this PHP build in /home/doulos/public_html/includes/class.php-captcha.php on line 298

Warning: imagefttext(): No FreeType 2 support in this PHP build in /home/doulos/public_html/includes/class.php-captcha.php on line 306

Warning: imageftbbox(): No FreeType 2 support in this PHP build in /home/doulos/public_html/includes/class.php-captcha.php on line 298

Warning: imagefttext(): No FreeType 2 support in this PHP build in /home/doulos/public_html/includes/class.php-captcha.php on line 306

Warning: imageftbbox(): No FreeType 2 support in this PHP build in /home/doulos/public_html/includes/class.php-captcha.php on line 298

Warning: imagefttext(): No FreeType 2 support in this PHP build in /home/doulos/public_html/includes/class.php-captcha.php on line 306

Warning: Cannot add header information - headers already sent by (output started at /home/doulos/public_html/includes/class.php-captcha.php:298) in /home/doulos/public_html/includes/class.php-captcha.php on line 322
‰PNG IHDRŒ<ƒÔ¢yäPLTEÿÿÿ‘†óîÄ—â´t¥”«ìÒòÊ†oö“lÕ¿rÔÅòômãŽiñÝ«eæ¢Üñš}Ú‚Ð…æ²Ô“ví§ÈdÀfå÷ÖœxéÈ ¹À™ì¢Éêž‚ÄÓÊóŠùÕžw¼…¢ŽºÛ’¤zãÒ‚wzŽ¯¬ùð„ìÈÑ˜ÑåøßÕnpíÈã‚ÑËßÎt¸öˆçÇrÚè~¢•qÊnr¯Àpœ«ŸÄÊÃÍ€Í§ëÔçõ€Ê·—¢zÉžÚ¤àjotÑàiÞyßÓ¼t¤wÄð}µwuz—˜Àî½Ôã´ƒlÆÄ, T5IKAJ,44]èâcTnIDATxœÙ[ÚÊà¥H ‘r/h{ªžŠÔräj KISþÿOºóÍìn6É‚ô9gž§ˆËÛofw*õ+zóú‡×Û˜ßÕd<çÞÿðA˜é¿¯ñrvbN‹»¿g!ÍuW®û5›rVê·¼_hÌðjZ–žir¹ýML]E•¦ÂóR€)RkfN”ºšä0 M¯¢4-óþ.é KÑœT0lñR‚š2çáa—Fµ S:Ÿ®ÓêV1hÒüv¼Ùø^!¨S5Žt sxfŒÆi×Ô®ï‚µ,xdÏ7^Êg®Œþ$ÉçrTyèsˆŸ¹¿—æpªé‘hºÝ.²ù«H†E$© \¹2´Ë3:å„$ªHÏNšV)lùê–ê¸m#“ù> kˆ“x'ÙM$ëœ^*ýê)ú«î)…2áY'ŽÆŒ‰‚¹} #+ÜÏ¡ ýJ!ý‰¾~½¿ç¥pŽÜçÊB¢öœŽ„BÕZj SÞ¶@Ã¯•$¾ÿ¨Iˆ¢A6FåÞöªlÁ¤Äž˜èR‡ÛsÛßkq_Óì~I@óã^[ªHF…9GgÊ¡èLŒæD…vÙyF{1õ*8®zz½¼§xjÜ¡&wI4S EÿÆ@²la“3–ÁoiÀ9.8=”RùQhP Ý,„3µ¡X $hQ:úDš{,?lù4XæÄ ´ƒ+ÇÍ{E¸Ñ #ÑtÓÔJþÐ?![›¬ìV¿³Óâeýø‘Y^’üîøä²ÃQ£šQØTJƒMÊh:*ù-áNÜÞ.yãewb>z+ãÛµÂ£¹}VôñcÈw M&SBëJo÷ÀàD\þú…«‰Î¡Ó«Ô;Üdnc(ãc…í jR'v,/UÉêª×{ìÙoÏÎ(›z2e8*ê²¬9 ¦59“ÉÃ rùtJ˜>cª5WqÜ)( Å±ºzGÑ¸Å©o¨$JÚDËk8Œ†C,ãÐ`p@B ¦$’><˜+¹SZHK¶¨y ©Í‹Z,®D©×××+UÕ|Û~“Ò œÜd6Ê(DN°Ø9„@“Ij7ê“Sn¶—8æwRÐ,/$ùTky,êŠZ¤³©jT’cr¨;]Úçè@$ ŸLR²³PÃÒtBßôZ‹v LKÂht£LHª†Qy’¤‹»À(ÌÏfNb³bÑOîžgÂ‹éáaa³ÙŒÆ¥ã‰¥†Q†´¾ÊI’èM'âCB Û.ÓÀŸ&¥´9™,K0h‚f´x}ê(OSÓ šÌéu'G(IÂ«P`GP8f8ãMrqñò2A*v¼«Ù˜d˜ôØ(j´m4ºÅ’d<–û‘lSÓÅ…“Gp Ü#Še çä÷98/Ô!ŠGaïk6 ¨Žñô©»í6\€lò±aÊ;ídÊ"f\_‡ÂDsŸ)lQßç‹\xü°•0Ž†Ú³5‰`ÛÓ€š4Mr4$¤F#œI"×¶b>,†(Å…àdRÕ\\8˜’F&e ŠÊH2VŽ…Ú¤ÛBË\˜i‘NŽªÇei‹rßïI»*ÆÎì–·6™ƒÑŽ©ú‚J’™‘°8JT»MkhÀý:á`^^0ð(«iÕ=«‹2F=ZŠÚl9yÿ’;Ë6ÒÌl½ž%0)Ñp‘§õÌïH‚à„-Î¡hÃiq>%Œ4Ëhº]35ÈÄ–9rç:(RSÈùz^qJ_DC©Ä}U¼k ‚ï• :Ãá±q9è’æ\Iµ¡@ƒ8²ÒÌÌ"}Ê(œ—ÂA} IÔ¦«×BÁ¼ÔÞº §¶¢ddÀ±Û›‘ck¶b¿A Î¯8À‘ïBÄbû&Å±Ô>JðjÌüšf‘äq|wçîê Í‹û)0Qëõá´Ûa,ŸJßJ¯Tñp8 c8” òÐ•ìx±x„ãîî®ôDWSúHú\¾§Í‘óA|•Tö€SÖ¬Š•L¡Hf†ïJ GãÃ´ÛëuŒ%Uû@ITò¤eÌÊL KÆº[Î©PpvaDÓÆåözm¸WôE{ Mêhº+#±1§rÑWÑ”,êŠcºIhxÂ®}$'ž4½Ô”.Lõãaâx1VãbntÅúkBž?÷•%±çòÒ9!VÊW;5xÁè¦( Ë¹2oŸ1/àxZÊªÈ£qû1Ô'³-ß”*»©&ÃÃRùT!9^ïõH]^^V©aÌË>Úÿy©²ƒ{^yöÀ785 ,7•Úû/hMý7_UÍ[œ E^zõæ‹ûê€ßiïåxRAí™Ãz½Õ,©ÿhÃ»z×™êIEND®B`‚

Posted: Tue Mar 13, 2007 2:41 pm

Neither of those URLs seem to be working. If you give the working url I can look into it better.

Posted: Tue Mar 13, 2007 2:49 pm

Sorry, the server is behind my firewall locally.

Try this:
http://71.192.149.248/modules.php?name=Your_Account

Posted: Tue Mar 13, 2007 2:57 pm

Doesnt work either. What is wierd is the error messages you are getting says that you do not have the correct compiled functions to display the image, yet for that type of image to be there you have to imageftbbox to even have it send the URL.

Do me a favor open includes/gfx_check.php

Find:

Code:

if (defined('VISUAL_CAPTCHA')) {

Before add:

Code:

var_dump(GDSUPPORT, defined('VISUAL_CAPTCHA'));

Then refresh your screen you should see a data dump

Posted: Tue Mar 13, 2007 3:03 pm

One additional line shows up in the body:

bool(true) int(1)

Posted: Tue Mar 13, 2007 3:08 pm

*scratched head*
Ok change the var_dump to:

Code:

var_dump(function_exists('imagecreatetruecolor'), function_exists('imageftbbox'), function_exists('imagefttext'));

Tell me what it says

Posted: Tue Mar 13, 2007 3:12 pm

bool(true) bool(true) bool(true)

Posted: Tue Mar 13, 2007 3:19 pm

Ok remove that line.

Open images/captcha.php

and add:

Code:

error_reporting(0);

Right after the <?php

Then try going directly to the image and see if it still has those errors

Posted: Tue Mar 13, 2007 3:24 pm

OK.
- removed the line from includes/gfx_check.php
- added new line to images/captcha.php
- go to http://www.gracioustest.org/images/captcha.php?size=normal

See a blank page with an image of colored lines.
If I refresh, the image changes - like someone rearranged the lines.

Posted: Tue Mar 13, 2007 3:25 pm

BTW - the original Your Account URL now shows the same image, but no code that is discernable/readable.

Posted: Tue Mar 13, 2007 3:29 pm

Well I am a bit perplexed. The errors from before were saying the those functions did not exists in PHP, but when we did a var_dump php seems to think they are there. So perhaps you have an older version FreeType and need to update. Or I am missing something....

Posted: Tue Mar 13, 2007 3:37 pm

$ /usr/bin/freetype-config --version
9.2.3

# rpm -qa | grep -i free
freetype-2.1.3-6

Posted: Tue Mar 13, 2007 3:41 pm

Well 2.3.2 is the most current, but I believe you should have been able to get this working with the version you had before.

Posted: Wed Mar 14, 2007 6:36 am

webservant, is this by chance running on a windows environment? Since it is behind your firewall, I just have a sneaking suspicion so.

Also, when you refresh the browser (It might take a couple of refreshes) does the image then come up?

I have noticed this behaviour locally on my development PC which is why I ask.

Posted: Wed Mar 14, 2007 2:06 pm

I'm running Red Hat 9. I have another thread open on a clean install (http://www.ravenphpscripts.com/postt12897.html). I'm just under the PHP version that supports html_entity_decode(). I'm betting that this function is (one of) the underlying problem(s).

Posted: Thu Mar 15, 2007 8:36 pm

As I found in my clean install post, the issue was the underlying software...

I upgraded:
RedHat 9 --> CentOS 3.8
PHP 4.2.2 --> PHP 4.3.2

PHP 4.3.0 or greater is required for html_entity_decode().

I'm testing my upgraded site now.

Posted: Fri Mar 16, 2007 8:50 am

You might really want to consider going to PHP 4.4.6.

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

webservant,

2 things. Do a Google on No FreeType 2 support in this PHP build and make sure that you have it installed correctly. Also, make sure that you have output buffering turned on in your php.ini file.