[ZendTo] Re: CAPTCHA in Pick-up

[Jules]

The captcha problem is presumably down to a bug in Google's code, as all 
I do is ask the captcha whether the test was successful or not. I don't 
handle any of the user input or processing of it at all, that's all done 
by Google.

The version number you see at the bottom is taken from 
/opt/zendto/config/preferences.php. Some sites may well heavily 
customise the user interface, enough that it's barely recognisable. At 
that point they may prefer to set their own version number as well, so I 
let you set it to what you like in preferences.php. I merely supply the 
default value with the distribution.

Jules.

On 12/12/2011 20:09, Joao Alexandre wrote:
> Hi again,
>
> Using IE9 or Firefox 8 the result is the same, when clicking in
> "Pick-up", on the first captcha type only the first word and I'me
> presented with an error, next keep trying only the first words of the
> captcha (sometimes once, twice, etc.) and I''ll get the screen with
> the "Claim ID" and "Claim Passcode" and "Pick-up the File(s)" button.
>
> Seems not very dangerous but the captcha isn't working like it should
> be. Again, I'm not saying it's a bug somewhere, just would like your
> help to see if it's something with my installation.
>
> I've installed ZendTo according to Jules guide for Ubuntu (I'm using
> Debian Squeeze), first time installed ZendTo package with dpkg -i
> <package>  (at this time it was version 4.06), then upgraded to version
> 4.07 the same way and today added ZendTo to my sources list and
> upgraded with apt-get update/upgrade.
>
> Odd is that at the bottom of all the screens it says "Version 4.06".
>
> Regards,
>
> Joao
>
> On Mon, Dec 12, 2011 at 6:53 PM, Joao Alexandre
> <jalexandre1964 at gmail.com>  wrote:
>> Hi All,
>>
>> Today I've found, and I don't know if it's related to my installation
>> (Debian Squeeze built from ground up and updated today to 4.08), that
>> when you go to the ZendTo site without Login and click on "Pick-up",
>> you're presented with a Captcha and some times I can jump to the next
>> step just by typing the first word of the captcha. I couldn't find a
>> match (number of characters, etc), but this is odd and the security
>> blows away.
>>
>> Probably this is particular to my installation but can you please try it out?
>>
>> Thanks in advance.
>>
>> Cheers,
>>
>> Joao
> _______________________________________________
> ZendTo mailing list
> ZendTo at zend.to
> http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto

Jules

-- 
Julian Field MEng CITP CEng
www.Zend.To

Follow me at twitter.com/JulesFM
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

'It's okay to live without all the answers' - Charlie Eppes, 2011
'All programs have a desire to be useful' - Tron, 1982
'That is the land of lost content,
  I see it shining plain,
  The happy highways where I went,
  And cannot come again.' - A.E. Houseman