[Mod] Human Verification test for Advanced GuestBook 2.3.4

Hi, here is another mod to Advanced Guest Book 2.3.4 english or french.
This has only been tested on a private site.
This is beta software. Use at your own risk.
Comments and bug rapports are welcome.

view plain copy to clipboard print ?

#################################################################
## MOD Title: Human Verification Test
## MOD Author: Wappendorf <wappendorf@hotmail.com>
## MOD Description:
## This mod is a human verification test for Advanced Guest Book 2.3.4
## It is based on Gitme Anti Flood code from Mert (c)2005 xkare.com
## Any other portion of this code is (c)2005 wappendorf@hotmail.com.
## All rights reserved.
##
## MOD Version: 1.0.2
##
## Installation Level: Easy
## Installation Time: 15 Minutes
## Files To Edit (8):
## lang/english.php
## lang/frensh.php
## add_entry.php
## lib/add.class.php
## templates/form.php
## comment.php
## lib/comment.class.php
## templates/comment.php
##
## New File (1): image.php
##############################################################
## For Security Purposes, Please Check: http://proxy2.de/forum/viewtopic.php?t=5057 for the
## latest version of this MOD. Downloading this MOD from other sites
## could cause malicious code to enter into your guestbook.
##############################################################
## Author Notes:
##
## MOD Features:
## - Generated gif image with control code needed to post an entry or comment.
##
## /***************************************************************************
## *
## * This program is free software; you can redistribute it and/or modify
## * it under the terms of the GNU General Public License as published by
## * the Free Software Foundation; either version 2 of the License, or
## * (at your option) any later version.
## *
## ***************************************************************************/
##
##############################################################
##
## Before Adding This MOD To Your Advanced Guestbook, You Should Back Up All Files Related To This MOD
##
##############################################################
#
#-----[ NEW FILE image.php ]------------------------------------------
#
<?php
/***************************************************************************
*
* Filename : image.php
* Began : 2005/04/04
* Modified : by Wappendorf 2005/10/01
* Copyright : (c) 2005 xkare.com
* Version : 1.0.1
* Written by : Mert ÷–‹T in istanbul / TURKEY
*
* You are encouraged to redistribute and / or modify this program under the terms of
* the GNU General Public License as published by the Free Software Foundation
* (www.fsf.org); any version as from version 2 of the License.
*
***************************************************************************/
session_start();
function strrand($length)
{
$str = "";
while(strlen($str)<$length){
$random=rand(48,122);
if( ($random>47 && $random<58) ){
$str.=chr($random);
}
}
return $str;
}
$text = $_SESSION['ctrlstring']=strrand(5);
$img_number = imagecreate(47,17);
$backcolor = imagecolorallocate($img_number,244,244,244);
$textcolor = imagecolorallocate($img_number,0,0,0);
imagefill($img_number,0,0,$backcolor);
Imagestring($img_number,50,1,1,$text,$textcolor);
header("Cache-Control: no-cache, must-revalidate");
header("Content-type: image/png");
imagejpeg($img_number);
?>
#
#-----[ OPEN ]------------------------------------------
#
lang/english.php
#
#-----[ FIND ]------------------------------------------
#
# Navigation Bar
$LANG["NavTotal"] = "Total Records:";
#
#-----[ BEFORE, ADD ]------------------------------------------
#
$LANG["FormCtrlCode"] = "Please copy the controle code.";
#
#-----[ FIND ]------------------------------------------
#
$LANG["PassMess1"] = "Please enter a valid username and password:";
#
#-----[ BEFORE, ADD ]------------------------------------------
#
$LANG["ErrorPost99"] = "You didn't fill correctly the controle code field. Please correct it and re-submit.";
#
#-----[ OPEN ]------------------------------------------
#
lang/frensh.php
#
#-----[ FIND ]------------------------------------------
#
# Navigation Bar
$LANG["NavTotal"] = "Nombre d'enregistrements:";
#
#-----[ BEFORE, ADD ]------------------------------------------
#
$LANG["FormCtrlCode"] = "Veuillez recopier le code de contrôle. ";
#
#-----[ FIND ]------------------------------------------
#
$LANG["PassMess1"] = "Merci de saisir un pseudo et un mot de passe valides:";
#
#-----[ BEFORE, ADD ]------------------------------------------
#
$LANG["ErrorPost99"] = "Vous n'avez pas recopié correctement le code de contrôle. Merci de corriger.";
#
#-----[ OPEN ]------------------------------------------
#
addentry.php
#
#-----[ FIND ]------------------------------------------
#
$include_path = dirname(__FILE__);
include_once $include_path."/admin/config.inc.php";
include_once $include_path."/lib/$DB_CLASS";
#
#-----[ BEFORE, ADD ]------------------------------------------
#
session_start();
#
#-----[ FIND ]------------------------------------------
#
$gb_post = new addentry($include_path);
if (isset($_POST["gb_action"])) {
#
#-----[ AFTER, ADD ]------------------------------------------
#
if($_POST['gb_ctrlcode'] != $_SESSION['ctrlstring'] OR !isset($_SESSION['ctrlstring']))
{
echo $_POST['gb_ctrlcode']."-".$_SESSION['ctrlstring']." -> SECURITY CODE ERROR... <br />Click on the backback button of your browser";
}else{
/* SECURITY SUCCESSFULL */
$gb_post->ctrlcode = (isset($_POST["gb_ctrlcode"])) ? $_POST["gb_ctrlcode"] : '';
#
#-----[ FIND ]------------------------------------------
#
} else {
echo $gb_post->process();
}
#
#-----[ BEFORE, ADD ]------------------------------------------
#
}
#
#-----[ OPEN ]------------------------------------------
#
lib/add.class.php
#
#-----[ FIND ]------------------------------------------
#
class addentry {
#
#-----[ AFTER, ADD ]------------------------------------------
#
var $ctrlcode;
#
#-----[ FIND ]------------------------------------------
#
$HIDDEN = "<input type=\"hidden\" name=\"gb_preview\" value=\"1\">\n";
#
#-----[ AFTER, ADD ]------------------------------------------
#
$HIDDEN .= "<input type=\"hidden\" name=\"gb_ctrlcode\" value=\"".$this->ctrlcode."\">\n";
#
#-----[ OPEN ]------------------------------------------
#
/templates/form.php
#
#-----[ FIND ]------------------------------------------
#
if(document.book.gb_comment.value == "") {
alert("$LANG[ErrorPost2]");
document.book.gb_comment.focus();
return false;
}
#
#-----[ AFTER, ADD ]------------------------------------------
#
if(document.book.gb_ctrlcode.value == "") {
alert("$LANG[ErrorPost99]");
document.book.gb_ctrlcode.focus();
return false;
}
#
#-----[ FIND ]------------------------------------------
#
<td bgcolor="$VARS[tb_color_1]" valign="top"><textarea name="gb_comment" cols="41" rows="11" wrap="VIRTUAL"></textarea><br>
<input type="checkbox" name="gb_private" value="1"> <font size="1" face="$VARS[font_face]">$LANG[FormPriv]</font>
</td>
</tr>
#
#-----[ AFTER, ADD ]------------------------------------------
#
<tr bgcolor="$VARS[tb_color_1]">
<td class="font1">$LANG[FormCtrlCode]:*</td>
<td ><img src="image.php">
<input name="gb_ctrlcode" type="text" id="gb_ctrlcode"></td>
</tr>
#
#-----[ OPEN ]------------------------------------------
#
comment.php
#
#-----[ FIND ]------------------------------------------
#
$include_path = dirname(__FILE__);
include_once $include_path."/admin/config.inc.php";
include_once $include_path."/lib/$DB_CLASS";
#
#-----[ BEFORE, ADD ]------------------------------------------
#
session_start();
#
#-----[ FIND ]------------------------------------------
#
$gb_com = new gb_comment($include_path);
#
#-----[ AFTER, ADD ]------------------------------------------
#
if (isset($_POST["comment"])) {
if($_POST['gb_ctrlcode'] != $_SESSION['ctrlstring'] OR !isset($_SESSION['ctrlstring']))
{
echo $_POST['gb_ctrlcode']."-".$_SESSION['ctrlstring']." -> SECURITY CODE ERROR... <br /> Please press the back button of your browser";
}else{
/* SECURITY SUCCESSFULL */
$gb_com->ctrlcode_ok = true;
}
}
#
#-----[ OPEN ]------------------------------------------
#
lib/comment.class.php
#
#-----[ FIND ]------------------------------------------
#
class gb_comment {
#
#-----[ AFTER, ADD ]------------------------------------------
#
var $ctrlcode_ok;
#
#-----[ FIND ]------------------------------------------
#
if ($status == 1) {
$this->insert_comment();
header("Location: $GB_PG[index]");
} else {
#
#-----[ REPLACE WITH ]------------------------------------------
#
if ($status == 1 and $this->ctrlcode_ok) {
$this->insert_comment();
header("Location: $GB_PG[index]");
} else {
#
#-----[ OPEN ]------------------------------------------
#
templates/comment.php
#
#-----[ FIND ]------------------------------------------
#
$COMMENT_PASS
#
#-----[ AFTER, ADD ]------------------------------------------
#
<tr bgcolor="$VARS[tb_color_1]">
<td class="font1">$LANG[FormCtrlCode]:*</td>
<td ><img src="image.php">
<input name="gb_ctrlcode" type="text" id="gb_ctrlcode"></td>
</tr>
#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM

################################################################# 
## MOD Title: Human Verification Test
## MOD Author: Wappendorf <wappendorf@hotmail.com>
## MOD Description: 
##		This mod is a human verification test for Advanced Guest Book 2.3.4
##		It is based on Gitme Anti Flood code from Mert (c)2005 xkare.com
##		Any other portion of this code is (c)2005 wappendorf@hotmail.com.
##		All rights reserved.
##
## MOD Version: 1.0.2
##
## Installation Level:	Easy
## Installation Time:	15 Minutes
## Files To Edit (8):
##			lang/english.php
##			lang/frensh.php
##			add_entry.php
##			lib/add.class.php
##		 	templates/form.php
##			comment.php
##			lib/comment.class.php
##		 	templates/comment.php
##			
## New File (1):	image.php
############################################################## 
## For Security Purposes, Please Check: http://proxy2.de/forum/viewtopic.php?t=5057 for the 
## latest version of this MOD. Downloading this MOD from other sites 
## could cause malicious code to enter into your guestbook.
############################################################## 
## Author Notes: 
##
## MOD Features:
##		- Generated gif image with control code needed to post an entry or comment.
##
##  /***************************************************************************
##  *
##  *   This program is free software; you can redistribute it and/or modify
##  *   it under the terms of the GNU General Public License as published by
##  *   the Free Software Foundation; either version 2 of the License, or
##  *   (at your option) any later version.
##  *
##  ***************************************************************************/
##
############################################################## 
##
## Before Adding This MOD To Your Advanced Guestbook, You Should Back Up All Files Related To This MOD 
##
##############################################################

# 
#-----[ NEW FILE image.php ]------------------------------------------ 
#

<?php
/***************************************************************************
 *
 *   Filename   		  : image.php
 *   Began			  : 2005/04/04
 *   Modified   		  : by Wappendorf 2005/10/01
 *   Copyright  		  : (c) 2005 xkare.com
 *   Version    		  : 1.0.1
 *   Written by 		  : Mert ÷–‹T in istanbul / TURKEY
 * 
 *   You are encouraged to redistribute and / or modify this program under the terms of  
 *   the GNU General Public License as published by the Free Software Foundation
 *    (www.fsf.org); any version as from version 2 of the License.
 *
 ***************************************************************************/
session_start();
function strrand($length)
{
	$str = "";
	
	while(strlen($str)<$length){
	$random=rand(48,122);
	if( ($random>47 && $random<58)  ){
	$str.=chr($random);
	} 
	
	}
		
	return $str;
}

$text = $_SESSION['ctrlstring']=strrand(5);
$img_number = imagecreate(47,17);
$backcolor = imagecolorallocate($img_number,244,244,244);
$textcolor = imagecolorallocate($img_number,0,0,0);

imagefill($img_number,0,0,$backcolor);

Imagestring($img_number,50,1,1,$text,$textcolor);

header("Cache-Control: no-cache, must-revalidate"); 
header("Content-type: image/png");
imagejpeg($img_number);
?>

# 
#-----[ OPEN ]------------------------------------------ 
#

lang/english.php