[ZendTo] Captcha stopped working this morning

Fri Apr 23 16:42:30 BST 2021

Great, thanks Jules! I will revert the changes back before we patch production, which should be coming up shortly.

------------------------------------------------------
Travis Zimmerman tzimmerman at fsu.edu<mailto:tzimmerman at fsu.edu> 850-645-8030
Linux Enterprise Applications & Systems its-linuxadmins at fsu.edu<mailto:its-linuxadmins at fsu.edu>
Information Technology Services, Florida State University

On Apr 23, 2021, at 11:01 AM, Marlon Deerr via ZendTo <zendto at zend.to<mailto:zendto at zend.to>> wrote:

Thanks Jules.  Your fix worked for me as well.

You are greatly appreciated,

From: ZendTo [mailto:zendto-bounces at zend.to] On Behalf Of HILLENBRAND Marita via ZendTo
Sent: Friday, April 23, 2021 8:05 AM
To: 'Jules' <Jules at Zend.To<mailto:Jules at Zend.To>>; 'ZendTo Users' <zendto at zend.to<mailto:zendto at zend.to>>
Cc: HILLENBRAND Marita <m.hillenbrand at montgeron.fr<mailto:m.hillenbrand at montgeron.fr>>
Subject: Re: [ZendTo] Captcha stopped working this morning

Thanks a lot Jules, you’re a magicien ☺.
I got back to the original configuration and applied your fix, works fine here.

Cheers,
Marita

Marita HILLENBRAND
Service Informatique
Centre Administratif et Technique
130, avenue Charles de Gaulle - 91230 Montgeron
Tél : 01 70 58 93 40  Port : 06 24 04 43 58
www.montgeron.fr<https://urldefense.com/v3/__https://www.montgeron.fr/__;!!PhOWcWs!mGd3uqniBymjF6KhUbHh7kUtlbircgPgc5gredOCG82TCM4a1pVu-outzwpgrYfkUw$>

<image001.jpg>
Participez, vous aussi, à la protection de l'environnement en n'imprimant ce courriel que si nécessaire.
Le présent courriel peut contenir des renseignements confidentiels et ne s’adresse qu’au(x) destinataire(s) indiqué(s) ci-dessus. Si ce courriel vous est parvenu par erreur, veuillez le supprimer et nous en aviser aussitôt. Merci.

De : Jules [mailto:Jules at Zend.To]
Envoyé : vendredi 23 avril 2021 10:54
À : ZendTo Users <zendto at zend.to<mailto:zendto at zend.to>>
Cc : HILLENBRAND Marita <m.hillenbrand at montgeron.fr<mailto:m.hillenbrand at montgeron.fr>>; Travis Zimmerman <TZimmerman at fsu.edu<mailto:TZimmerman at fsu.edu>>
Objet : Re: [ZendTo] Captcha stopped working this morning

Marita, Travis,

I have also posted the correct fix as a news item on
    https://zend.to<https://urldefense.com/v3/__https://zend.to__;!!PhOWcWs!mGd3uqniBymjF6KhUbHh7kUtlbircgPgc5gredOCG82TCM4a1pVu-outzwovw5k-Bg$>

If you change the code to point at google.com<http://google.com/> instead of recaptcha.net<http://recaptcha.net/>, you will find no one in China can use your ZendTo service any more.

There is no need to change any of the code or templates, it's purely an Apache web server configuration change that is needed.

Cheers,
Jules.
On Fri 23/04/21 09:44, HILLENBRAND Marita via ZendTo wrote:
Hello again,

I found the files, (sorry) and I changed recaptcha.net<http://recaptcha.net/> to google.com<http://google.com/> like Travis said.
It’s working fine for Firefox, Chrome and Edge, thank’s a lot!

It still doesn’t work on Safari on my cellphone, but I’m not sur that worked before, never tried.

Best regards,

Marita HILLENBRAND
Service Informatique
Centre Administratif et Technique
130, avenue Charles de Gaulle - 91230 Montgeron
Tél : 01 70 58 93 40  Port : 06 24 04 43 58
www.montgeron.fr<https://urldefense.com/v3/__https://www.montgeron.fr/__;!!PhOWcWs!mGd3uqniBymjF6KhUbHh7kUtlbircgPgc5gredOCG82TCM4a1pVu-outzwpgrYfkUw$>

<image001.jpg>
Participez, vous aussi, à la protection de l'environnement en n'imprimant ce courriel que si nécessaire.
Le présent courriel peut contenir des renseignements confidentiels et ne s’adresse qu’au(x) destinataire(s) indiqué(s) ci-dessus. Si ce courriel vous est parvenu par erreur, veuillez le supprimer et nous en aviser aussitôt. Merci.

De : HILLENBRAND Marita
Envoyé : vendredi 23 avril 2021 10:19
À : 'ZendTo Users' <zendto at zend.to><mailto:zendto at zend.to>
Cc : Scott Silva <ssilva at sgvwater.com><mailto:ssilva at sgvwater.com>
Objet : RE: Captcha stopped working this morning

Hello,

Same problem here, tested  with or without the firewall and Firefox, Safari and Edge.

I don’t find those files Travis is describing, is there any other place to modify recaptcha.net<http://recaptcha.net/> to google.com<http://google.com/> ?

Best regards,
Marita HILLENBRAND
Service Informatique
Centre Administratif et Technique
130, avenue Charles de Gaulle - 91230 Montgeron
Tél : 01 70 58 93 40  Port : 06 24 04 43 58
www.montgeron.fr<https://urldefense.com/v3/__https://www.montgeron.fr/__;!!PhOWcWs!mGd3uqniBymjF6KhUbHh7kUtlbircgPgc5gredOCG82TCM4a1pVu-outzwpgrYfkUw$>

<image001.jpg>
Participez, vous aussi, à la protection de l'environnement en n'imprimant ce courriel que si nécessaire.
Le présent courriel peut contenir des renseignements confidentiels et ne s’adresse qu’au(x) destinataire(s) indiqué(s) ci-dessus. Si ce courriel vous est parvenu par erreur, veuillez le supprimer et nous en aviser aussitôt. Merci.

De : ZendTo [mailto:zendto-bounces at zend.to] De la part de Scott Silva via ZendTo
Envoyé : jeudi 22 avril 2021 22:24
À : 'ZendTo Users' <zendto at zend.to<mailto:zendto at zend.to>>
Cc : Scott Silva <ssilva at sgvwater.com<mailto:ssilva at sgvwater.com>>
Objet : Re: [ZendTo] Captcha stopped working this morning

Maybe that address got into some blacklists? I know several browsers have started adding security internally.

From: ZendTo <zendto-bounces at zend.to<mailto:zendto-bounces at zend.to>> On Behalf Of Travis Zimmerman via ZendTo
Sent: Thursday, April 22, 2021 11:58 AM
To: Marlon Deerr <MDeerr at hshlawyers.com<mailto:MDeerr at hshlawyers.com>>
Cc: Travis Zimmerman <TZimmerman at fsu.edu<mailto:TZimmerman at fsu.edu>>; ZendTo Users <zendto at zend.to<mailto:zendto at zend.to>>
Subject: Re: [ZendTo] Captcha stopped working this morning

I spent some time digging around in the code and made a change to two files, this allowed Recaptcha to work again for me.
zendto/templates/header.tpl
zendto/www/ReCaptcha/RequestMethod/CurlPost.php

I changed recaptcha.net<https://urldefense.com/v3/__http://recaptcha.net__;!!PhOWcWs!mGd3uqniBymjF6KhUbHh7kUtlbircgPgc5gredOCG82TCM4a1pVu-outzwqMLGMJaA$> to google.com<https://urldefense.com/v3/__http://google.com__;!!PhOWcWs!mGd3uqniBymjF6KhUbHh7kUtlbircgPgc5gredOCG82TCM4a1pVu-outzwqCum6lyA$> in those files and the Recaptchas start rendering again and worked correctly.

I’m guessing that something happened with recaptcha.net<https://urldefense.com/v3/__http://recaptcha.net__;!!PhOWcWs!mGd3uqniBymjF6KhUbHh7kUtlbircgPgc5gredOCG82TCM4a1pVu-outzwqMLGMJaA$>, it seems to be up but we weren’t getting responses depending on browser and OS combinations (Firefox on Win10 good, Firefox on Linux/Mac bad, DuckDuckGo on iOS good).

------------------------------------------------------
Travis Zimmerman
tzimmerman at fsu.edu<mailto:tzimmerman at fsu.edu>
850-645-8030
Linux Enterprise Applications & Systems
its-linuxadmins at fsu.edu<mailto:its-linuxadmins at fsu.edu>
Information Technology Services, Florida State University

On Apr 22, 2021, at 2:27 PM, Marlon Deerr <MDeerr at hshlawyers.com<mailto:MDeerr at hshlawyers.com>> wrote:

Maybe firewall related then?

At home on my personal PC, I am running Firefox 88 (64bit) and captcha works just fine.

Internally, we are running Firefox 88 (64bit) and captcha does not work.  I just realized it does not work

At home, captcha fails on my Vivaldi browser, but it also reports that the contents are being blocked.

Not sure what to make of this.

<image001.png>

Marlon Deerr, Technology Manager
416-572-8795 (direct) | MDeerr at hshlawyers.com<mailto:MDeerr at hshlawyers.com>
<image5b2194.JPG><https://urldefense.com/v3/__https:/www.hshlawyers.com__;!!PhOWcWs!igecYnV_bBVpQtssL93AIfOhX35Jf4SIVsoG-Kc9oUIPVZZfXbkdxY5OrslS0BojrA$>
<image14c73e.JPG><https://urldefense.com/v3/__https:/www.linkedin.com/company/howie-sacks-&-henry-llp---personal-injury-law/__;!!PhOWcWs!igecYnV_bBVpQtssL93AIfOhX35Jf4SIVsoG-Kc9oUIPVZZfXbkdxY5Orskgfy7_BQ$> <imagee0097e.JPG><https://urldefense.com/v3/__https:/twitter.com/hshlawyers__;!!PhOWcWs!igecYnV_bBVpQtssL93AIfOhX35Jf4SIVsoG-Kc9oUIPVZZfXbkdxY5OrsnLcapzPQ$> <image26029e.JPG><https://urldefense.com/v3/__https:/www.facebook.com/HSHPersonalInjuryLawyers/__;!!PhOWcWs!igecYnV_bBVpQtssL93AIfOhX35Jf4SIVsoG-Kc9oUIPVZZfXbkdxY5OrslNQ_wzhA$> <image85b929.JPG><https://urldefense.com/v3/__https:/www.youtube.com/user/hshlawyers__;!!PhOWcWs!igecYnV_bBVpQtssL93AIfOhX35Jf4SIVsoG-Kc9oUIPVZZfXbkdxY5OrsnXuW8ILQ$>
3500 - 20 Queen St. W., Toronto, ON M5H 3R3
Fax: 416-361-0083 | Toll Free: 877-474-5997 | www.hshlawyers.com<https://urldefense.com/v3/__https:/www.hshlawyers.com__;!!PhOWcWs!igecYnV_bBVpQtssL93AIfOhX35Jf4SIVsoG-Kc9oUIPVZZfXbkdxY5OrslS0BojrA$>

This Howie Sacks & Henry e-mail is privileged, confidential and subject to copyright. Any unauthorized use or disclosure is prohibited.

From: ZendTo [mailto:zendto-bounces at zend.to] On Behalf Of Marlon Deerr via ZendTo
Sent: Thursday, April 22, 2021 1:43 PM
To: 'Travis Zimmerman' <TZimmerman at fsu.edu<mailto:TZimmerman at fsu.edu>>
Cc: Marlon Deerr <MDeerr at hshlawyers.com<mailto:MDeerr at hshlawyers.com>>; ZendTo Users <zendto at zend.to<mailto:zendto at zend.to>>
Subject: Re: [ZendTo] Captcha stopped working this morning

Actually, correction.

I’ve done a bit more investigation and this is what I have found.

Microsoft Edge Browser = captcha not working
Vivaldi Browser = captcha not working
Google Chrome Browser = captcha not working

Firefox Browser – captcha works fine. No problems!

Is this some browser compatibility issue happening here?

From: Travis Zimmerman [mailto:TZimmerman at fsu.edu]
Sent: Thursday, April 22, 2021 1:37 PM
To: Marlon Deerr <MDeerr at hshlawyers.com<mailto:MDeerr at hshlawyers.com>>
Cc: ZendTo Users <zendto at zend.to<mailto:zendto at zend.to>>
Subject: Re: Captcha stopped working this morning

Did your problem start today too?

------------------------------------------------------
Travis Zimmerman
tzimmerman at fsu.edu<mailto:tzimmerman at fsu.edu>
850-645-8030
Linux Enterprise Applications & Systems
its-linuxadmins at fsu.edu<mailto:its-linuxadmins at fsu.edu>
Information Technology Services, Florida State University

On Apr 22, 2021, at 1:35 PM, Marlon Deerr <MDeerr at hshlawyers.com<mailto:MDeerr at hshlawyers.com>> wrote:

Same thing for me. We are running Version 6.09-1. Captcha not working either.

Marlon Deerr, Technology Manager
416-572-8795 (direct) | MDeerr at hshlawyers.com<mailto:MDeerr at hshlawyers.com>
<image6362f4.JPG><https://urldefense.com/v3/__https:/www.hshlawyers.com__;!!PhOWcWs!hilWEpJGK0HQ8MHLW9OqZA06b8H4RQ1_-oRTaKUz-NF1nESz6Mimxx3FVJcsflHDEg$>
<imagee5d23b.JPG><https://urldefense.com/v3/__https:/www.linkedin.com/company/howie-sacks-&-henry-llp---personal-injury-law/__;!!PhOWcWs!hilWEpJGK0HQ8MHLW9OqZA06b8H4RQ1_-oRTaKUz-NF1nESz6Mimxx3FVJeMFqoh9w$> <image33144d.JPG><https://urldefense.com/v3/__https:/twitter.com/hshlawyers__;!!PhOWcWs!hilWEpJGK0HQ8MHLW9OqZA06b8H4RQ1_-oRTaKUz-NF1nESz6Mimxx3FVJdiRLnRhQ$> <image0f4bd5.JPG><https://urldefense.com/v3/__https:/www.facebook.com/HSHPersonalInjuryLawyers/__;!!PhOWcWs!hilWEpJGK0HQ8MHLW9OqZA06b8H4RQ1_-oRTaKUz-NF1nESz6Mimxx3FVJc5veQHFA$> <image1885c8.JPG><https://urldefense.com/v3/__https:/www.youtube.com/user/hshlawyers__;!!PhOWcWs!hilWEpJGK0HQ8MHLW9OqZA06b8H4RQ1_-oRTaKUz-NF1nESz6Mimxx3FVJc7j_2EJw$>
3500 - 20 Queen St. W., Toronto, ON M5H 3R3
Fax: 416-361-0083 | Toll Free: 877-474-5997 | www.hshlawyers.com<https://urldefense.com/v3/__https:/www.hshlawyers.com__;!!PhOWcWs!hilWEpJGK0HQ8MHLW9OqZA06b8H4RQ1_-oRTaKUz-NF1nESz6Mimxx3FVJcsflHDEg$>

This Howie Sacks & Henry e-mail is privileged, confidential and subject to copyright. Any unauthorized use or disclosure is prohibited.

From: ZendTo [mailto:zendto-bounces at zend.to] On Behalf Of Travis Zimmerman via ZendTo
Sent: Thursday, April 22, 2021 12:44 PM
To: ZendTo Users <zendto at zend.to<mailto:zendto at zend.to>>
Cc: Travis Zimmerman <TZimmerman at fsu.edu<mailto:TZimmerman at fsu.edu>>
Subject: [ZendTo] Captcha stopped working this morning

Our captcha stopped working this morning. It doesn’t appear to be displaying anything from captcha.
Captcha: Google v2
Zendto Ver: 6.07-1
OS: RHEL 7.9
Any suggestions would be appreciated.

------------------------------------------------------
Travis Zimmerman
tzimmerman at fsu.edu<mailto:tzimmerman at fsu.edu>
850-645-8030
Linux Enterprise Applications & Systems
its-linuxadmins at fsu.edu<mailto:its-linuxadmins at fsu.edu>
Information Technology Services, Florida State University

_______________________________________________

ZendTo mailing list

ZendTo at zend.to<mailto:ZendTo at zend.to>

http://jul.es/mailman/listinfo/zendto<https://urldefense.com/v3/__http://jul.es/mailman/listinfo/zendto__;!!PhOWcWs!mGd3uqniBymjF6KhUbHh7kUtlbircgPgc5gredOCG82TCM4a1pVu-outzwqmQWKXmQ$>

Jules

--

Julian Field MEng CEng CITP MBCS MIEEE MACM

'Think globally, act locally.' - Friends of the Earth

www.Zend.To<https://urldefense.com/v3/__http://www.Zend.To__;!!PhOWcWs!mGd3uqniBymjF6KhUbHh7kUtlbircgPgc5gredOCG82TCM4a1pVu-outzwoJkuWngg$>

Twitter: @JulesFM

_______________________________________________
ZendTo mailing list
ZendTo at zend.to<mailto:ZendTo at zend.to>
https://urldefense.com/v3/__http://jul.es/mailman/listinfo/zendto__;!!PhOWcWs!mGd3uqniBymjF6KhUbHh7kUtlbircgPgc5gredOCG82TCM4a1pVu-outzwqmQWKXmQ$

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://jul.es/pipermail/zendto/attachments/20210423/c38b0498/attachment-0001.html>