Ticket #1115: recaptcha_fix.diff

create_account_form.php

@@ -20 +20 @@
 require_once('../inc/util.inc');
 require_once('../inc/countries.inc');
 require_once('../inc/translation.inc');
+require_once('../inc/recaptchalib.php');
 
 check_get_args(array("next_url", "teamid"));
 
@@ -111 +112 @@
     tra("Postal or ZIP Code")."<br><span class=\"description\">".tra("Optional")."</span>",
     "<input type=\"text\" name=\"postal_code\" size=\"20\">"
 );
+
+// Check if we need reCaptcha for making more safe the creation of accounts
+$publickey = parse_config($config, "<recaptcha_public_key>");
+
+if ($publickey) {
+
+        row2(
+            tra("Please enter the words shown in the image"),
+            recaptcha_get_html($publickey)
+        );
+}
+
 row2("",
     "<input type=\"submit\" value=\"".tra("Create account")."\">"
 );

create_account_action.php

@@ -20 +20 @@
 include_once("../inc/util.inc");
 include_once("../inc/email.inc");
 include_once("../inc/user.inc");
+include_once("../inc/recaptchalib.php");
 
 function show_error($str) {
     page_head("Can't create account");
@@ -41 +42 @@
     exit();
 }
 
+$privatekey = parse_config($config, "<recaptcha_private_key>");
+  if ($privatekey) {
+      $resp = recaptcha_check_answer($privatekey, $_SERVER["REMOTE_ADDR"],
+          $_POST["recaptcha_challenge_field"], $_POST["recaptcha_response_field"]
+      );
+      if (!$resp->is_valid) {
+          echo "" . tra("Your reCAPTCHA response was not correct. Please try again."). "";
+          return;
+      }
+  }
+
 // see whether the new account should be pre-enrolled in a team,
 // and initialized with its founder's project prefs
 //