/ - Diff - WB 2.08.x - Tracking

     ------------------------------------- 2.7.0 -------------------------------------
 -Jan-2008 Thomas Hornik
     #	Security bugfix: Text file for text-captcha was readable from everywhere
     #	Security bugfix: Text file for text-captcha was world-readable. Moved to database.
     #	Text-captcha: empty line in test file, following a question, was accepted as answer. Fixed.
 -Jan-2008 Matthias Gallas
     #	Replaced all special chars in language files with htmlentities or unicode

     if(defined('WB_PATH') == false) { exit("Cannot access this file directly"); }
     global $admin;
     global $database;
     $name = 'text';
     $file = WB_PATH."/temp/.captcha_$name.php";
-...
     $_SESSION['captcha'] = rand(0,99999);
     // get questions and answers
     $qa = array();
     @$content = file($file);
     if($content===FALSE) {
     	echo '<b>Error</b>: Can not read text! Enter <b>0</b> to solve this captcha';
     	$_SESSION['captcha'] = '0';
     	return;
     $text_qa='';
     $table = TABLE_PREFIX.'mod_captcha_control';
     if($query = $database->query("SELECT ct_text FROM $table")) {
     	$data = $query->fetchRow();
     	$text_qa = $admin->strip_slashes($data['ct_text']);
+    }
     $content = explode("\n", $text_qa);
     reset($content);
     while($s = current($content)) {
     	// get question
-...
     	}	else {
     		$lang='XX';
     		$q=substr($s,1);
     		if($q=='') {
     			next($content);
     			continue;
+    		}
+    	}
     	// get answer
     	$s=next($content);
-...
     		next($content);
+    	}
+    }
     if($qa == array()) {
     if(!isset($qa) || $qa == array()) {
     	echo '<b>Error</b>: no text defined! Enter <b>0</b> to solve this captcha';
     	$_SESSION['captcha'] = '0';
     	return;
-...
     echo $k;
     ?>
     ?>

     	");
     	// save text-captchas
     	if($_POST['captcha_type'] == 'text') {
     	if($_POST['captcha_type'] == 'text') { // ct_text
     		$text_qa=$_POST['text_qa'];
     		if(strpos($text_qa, '### example ###') === FALSE) {
     			$text_qa=$admin->add_slashes($text_qa);
     			$text_qa="<?php die(header('Location: ../index.php')); ?>\n".$text_qa;
     			if($fh = fopen(WB_PATH.'/temp/.captcha_text.php', 'wb')) {
     				fwrite($fh, $text_qa);
     				fclose($fh);
+    			}
     			$database->query("UPDATE $table SET ct_text = '$text_qa'");
+    		}
+    	}
-...
     	// load text-captchas
     	$text_qa='';
     	if(file_exists(WB_PATH.'/include/captcha/captchas/text.php')) {
     		if(file_exists(WB_PATH.'/temp/.captcha_text.php')) {
     			@$content = file(WB_PATH.'/temp/.captcha_text.php');
     			if($content!==FALSE) {
     				$content[0]='';
     				$text_qa = $admin->strip_slashes(implode('', $content));
+    			}
+    		}
     	if($query = $database->query("SELECT ct_text FROM $table")) {
     		$data = $query->fetchRow();
     		$text_qa = $admin->strip_slashes($data['ct_text']);
+    	}
     	if($text_qa == '')
     		$text_qa = $MOD_CAPTCHA_CONTROL['CAPTCHA_TEXT_DESC'];
-...
     <?php
+    }
     ?>
     ?>

     	`captcha_type` VARCHAR(255) NOT NULL DEFAULT 'calc_text',
     	`asp_session_min_age` INT(11) NOT NULL DEFAULT '20',
     	`asp_view_min_age` INT(11) NOT NULL DEFAULT '10',
     	`asp_input_min_age` INT(11) NOT NULL DEFAULT '5'
     	`asp_input_min_age` INT(11) NOT NULL DEFAULT '5',
     	`ct_text` LONGTEXT NOT NULL DEFAULT ''
     	)"
     );

WB 2.08.x