View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0000795 | XMB1 | Bugs | public | 2025-06-14 14:36 | 2025-07-08 15:06 |
| Reporter | flushedpancake | Assigned To | miqrogroove | ||
| Priority | normal | Severity | minor | Reproducibility | sometimes |
| Status | resolved | Resolution | fixed | ||
| Product Version | 1.9.12 | ||||
| Target Version | 1.10.00 | Fixed in Version | 1.10.00 | ||
| Summary | 0000795: CAPTCHA settings are unexpectedly empty if php-gd is not installed. | ||||
| Description | There is a functional check to see if the GD extension is installed or not, since it blocks you from editing the settings in the admin panel if GD is disabled. However, on a page where the CAPTCHA runs, an error occurs that blocks the page from rendering. [Wed Jun 11 21:25:31.980642 2025] [php:error] [pid 2930:tid 2930] [client 127.0.0.1:33038] PHP Fatal error: Uncaught RuntimeException: XMB captcha is enabled but not working. in /srv/www/htdocs/member.php:408\nStack trace:\n#0 {main}\n thrown in /srv/www/htdocs/member.php on line 408, referer: http://localhost/member.php?action=reg | ||||
| Additional Information | The XMB CAPTCHA is about as effective at defeating spambots as the Maginot Line was at protecting France from being invaded during WW2, so it's debatable whether it's even worth bothering to fix it or not... | ||||
| Tags | No tags attached. | ||||
| MySQL Version | |||||
| PHP Version | |||||
| Web Server | |||||
| Browser | |||||
| Flags | |||||
| Original Reporter | |||||
| SVN Revision | |||||
| Git Commit | https://github.com/miqrogroove/xmb/commit/d6eedfe25bb769debff7e4e397f3c3961de9a675 | ||||
|
|
(Personally, I'd advocate for completely nuking the internal CAPTCHA system for the exact reason mentioned in the additional information box. There's a few methods that exist that don't involve CAPTCHA to combat bots, though most of them have been rendered obsolete thanks to advanced machine-learning...) |
|
|
So the intent here was to try to alert the user that something isn't working, rather than "fail open" and allow anyone to bypass the captcha. Probably the best solution is to allow the admin to turn it off completely using the settings panel. |
|
|
Well, yeah. The XMB CAPTCHA is extremely outdated and ineffective anyways, from what I remember. Providing a non-CAPTCHA means of registration verification would be nice too. (This could also be utilised as a means of making a public forum with a private passkey required for registration.) |
|
|
We were both wrong about this one. The settings display is conditional on the Captcha object status, but the form validation is not. When GD support is missing, the captcha would be turned off and the related settings forced to empty strings after submitting the settings form. |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2025-06-14 14:36 | flushedpancake | New Issue | |
| 2025-06-14 14:48 | flushedpancake | Note Added: 0000565 | |
| 2025-07-04 08:15 | miqrogroove | Priority | low => normal |
| 2025-07-04 08:15 | miqrogroove | Severity | trivial => minor |
| 2025-07-04 08:15 | miqrogroove | Status | new => acknowledged |
| 2025-07-04 08:15 | miqrogroove | Product Version | => 1.9.12 |
| 2025-07-04 08:15 | miqrogroove | Target Version | => 1.10.00 |
| 2025-07-04 08:15 | miqrogroove | Note Added: 0000570 | |
| 2025-07-06 00:13 | flushedpancake | Note Added: 0000571 | |
| 2025-07-08 14:29 | miqrogroove | Assigned To | => miqrogroove |
| 2025-07-08 14:29 | miqrogroove | Status | acknowledged => assigned |
| 2025-07-08 14:47 | miqrogroove | Summary | The CAPTCHA cannot be disabled if php-gd is not installed. => CAPTCHA settings are unexpectedly empty if php-gd is not installed. |
| 2025-07-08 14:47 | miqrogroove | Note Added: 0000573 | |
| 2025-07-08 15:05 | miqrogroove | Status | assigned => resolved |
| 2025-07-08 15:05 | miqrogroove | Resolution | open => fixed |
| 2025-07-08 15:05 | miqrogroove | Fixed in Version | => 1.12.00 |
| 2025-07-08 15:05 | miqrogroove | Git Commit | => https://github.com/miqrogroove/xmb/commit/d6eedfe25bb769debff7e4e397f3c3961de9a675 |
| 2025-07-08 15:05 | miqrogroove | Product Version | 1.9.12 => 1.10.00 |
| 2025-07-08 15:06 | miqrogroove | Product Version | 1.10.00 => 1.9.12 |
| 2025-07-08 15:06 | miqrogroove | Fixed in Version | 1.12.00 => 1.10.00 |
