image verification script for 2.31

I recently install the script and it seems to work halfway. I not at all used to php. Html I know better so I am lost.

Where I sign in, it doesn't get complete because of the image vertification and it doesn't supply with new numbers even when I refresh. I'm pretty sure I messed up somewhere but I don't know to figure that out.

Sorry the guestbook is here http://www.ccgrove.com/samemme/index.php

you didn't install the script right. If you view the source, nothing changes

always says verifyimage.php?k= but should say verifyimage.php?k=234234 or some other number. Recheck your work. Or maybe your server does not support the script.

I only change the 8 characters in the verify.php and basically went through the process again. So I figuring it the verify.php

I did the eight different character but in the file it says do not go below this line but I am still suppose to change something beside the eight characters.

how to add the Image Verification mod.

1 - First to prevent the spammers from being able to figure out our image verifcation characters we need to make them unique to our site.

Open up verify.php and follow the instructions.

2 - Upload both verify.php and verifyimge.php to the same directory (folder) as your addentry.php.

3 - Open addentry.php.

Find 
	<?php
	$include_path = dirname(__FILE__);

and replace it with 
	<?php
	include("verify.php");
	$include_path = dirname(__FILE__);

Find
	if (isset($HTTP_POST_VARS["gb_action"])) {
	    $gb_post->name = (isset($HTTP_POST_VARS["gb_name"])) ? $HTTP_POST_VARS["gb_name"] : '';
	or if you use version 2.2 of the guestbook find
	if ($HTTP_SERVER_VARS["REQUEST_METHOD"] == "POST") {
	    $gb_post->name = (isset($HTTP_POST_VARS["name"])) ? $HTTP_POST_VARS["name"] : '';

For version 2.3.1 replace it with 
	if (isset($HTTP_POST_VARS["gb_action"])) {
	      if (strtoupper($_POST["keycode"])!=$Vword) 
	     {
	          echo ("The <strong>Image Verication</strong> code you supplied is incorrect.<br />\nPlease enter the 8 characters that appear in the image.");
	          echo $gb_post->process();
	          die();
	     }
	    $gb_post->Vrand = $Vrand;
	    $gb_post->name = (isset($HTTP_POST_VARS["gb_name"])) ? $HTTP_POST_VARS["gb_name"] : '';

For version 2.2 replace it with 
	if ($HTTP_SERVER_VARS["REQUEST_METHOD"] == "POST") {
		if (strtoupper($_POST["keycode"])!=$Vword)
		{
	          echo ("The <strong>Image Verication</strong> code you supplied is incorrect.<br />\nPlease enter the 8 characters that appear in the image.");
	          echo $gb_post->process();
	          die();
	        }
		$gb_post->Vrand = $Vrand;
		$gb_post->name = (isset($HTTP_POST_VARS["name"])) ? $HTTP_POST_VARS["name"] : '';

If you use a footer file for your site place the include code between the echo $gb_post->process; and the die();

Close addentry.php

4 - Open templates/form.php

Find
	flag=1;
     Replace with
	if(document.book.keycode.value == "") {
	alert("You Must Enter The Image Verification Characters Into The Box");
	document.book.keycode.focus();
	return false;
	}
	 flag=1;

Find
	  <tr bgcolor="$VARS[tb_color_1]">
	    <td width="25%"><div align="left" class="font2">$HTML_CODE<br />$SMILE_CODE<br />$AG_CODE</div></td>
	    <td>

If you use 2.2 then look for
	  <tr bgcolor="$VARS[tb_color_1]">
	    <td width="25%">&nbsp;</td>
	    <td>

For 2.3.1 replace it with 
	<tr bgcolor="$VARS[tb_color_1]">
	     <td width="25%" class="font1">Image Verification:&nbsp;<input type="hidden" name="rand" value="$Vrand"></td> 
	     <td>Enter these characters <img src="verifyimage.php?k=$Vrand" alt="Enter these characters into the textbox on the right" height="18" width="75"> into this text box <input type="text" size="8" maxlength="8" name="keycode" value="$_POST[rand]"></td>
	</tr>
	  <tr bgcolor="$VARS[tb_color_1]">
	    <td width="25%"><div align="left" class="font2">$HTML_CODE<br />$SMILE_CODE<br />$AG_CODE</div></td>
	    <td>

For 2.2 replace it with 
	<tr bgcolor="$VARS[tb_color_1]">
	     <td width="25%" class="font1">Enter the Characters:&nbsp;<input type="hidden" name="rand" value="$Vrand"></td> 
	     <td><input type="text" size="42" maxlength="8" name="keycode" value="$_POST[rand]">&nbsp;<img src="verifyimage.php?k=$Vrand" alt="Enter the Number" height="22" width="80"></td>
	</tr>
	<tr bgcolor="$VARS[tb_color_1]">
	     <td width="25%">&nbsp;</td>
	     <td>

Save and close form.php

5 - Open lib/add.class.php

Find
	var $table = array();

Just below it put 
	var $Vrand = '';

Find
	$HIDDEN .= "<input type=\"hidden\" name=\"gb_name\" value=\"".$this->name."\">\n";

For 2.2 find
	$HIDDEN .= "<input type=\"hidden\" name=\"name\" value=\"".$this->name."\">\n";

2.3.1 replace it with 
	$HIDDEN .= "<input type=\"hidden\" name=\"keycode\" value=\"".$_POST["keycode"]."\">";
	$HIDDEN .= "<input type=\"hidden\" name=\"rand\" value=\"$Vrand\">\n"; //Hidden Random Value
	$HIDDEN .= "<input type=\"hidden\" name=\"gb_name\" value=\"".$this->name."\">\n";

2.2 replace it with
	$HIDDEN .= "<input type=\"hidden\" name=\"name\" value=\"".$this->name."\">\n";
     	$HIDDEN .= "<input type=\"hidden\" name=\"keycode\" value=\"".$_POST["keycode"]."\">";
	$HIDDEN .= "<input type=\"hidden\" name=\"rand\" value=\"$Vrand\">\n"; //Hidden Random Value

Save and close add.class.php

And thats it.

Just follow the directions. That is correct, you only need to change the numbers

Ok let's see if you can see it.
Addentry.php

<?php
	include("verify.php");
	$include_path = dirname(__FILE__);
include_once $include_path."/admin/config.inc.php";
include_once $include_path."/lib/$DB_CLASS";
include_once $include_path."/lib/image.class.php";
include_once $include_path."/lib/template.class.php";

include_once $include_path."/lib/vars.class.php";
include_once $include_path."/lib/add.class.php";

$gb_post = new addentry($include_path);

if (isset($HTTP_POST_VARS["gb_action"])) {
	      if (strtoupper($_POST["keycode"])!=$Vword) 
	     {
	          echo ("The <strong>Image Verication</strong> code you supplied is incorrect.<br />\nPlease enter the 8 characters that appear in the image.");
	          echo $gb_post->process();
	          die();
	     }
	    $gb_post->Vrand = $Vrand;
	    $gb_post->name = (isset($HTTP_POST_VARS["gb_name"])) ? $HTTP_POST_VARS["gb_name"] : '';

$gb_post->email = (isset($HTTP_POST_VARS["gb_email"])) ? $HTTP_POST_VARS["gb_email"] : '';
    $gb_post->url = (isset($HTTP_POST_VARS["gb_url"])) ? $HTTP_POST_VARS["gb_url"] : '';
    $gb_post->comment = (isset($HTTP_POST_VARS["gb_comment"])) ? $HTTP_POST_VARS["gb_comment"] : '';
    $gb_post->location = (isset($HTTP_POST_VARS["gb_location"])) ? $HTTP_POST_VARS["gb_location"] : '';
    $gb_post->icq = (isset($HTTP_POST_VARS["gb_icq"])) ? $HTTP_POST_VARS["gb_icq"] : '';
    $gb_post->aim = (isset($HTTP_POST_VARS["gb_aim"])) ? $HTTP_POST_VARS["gb_aim"] : '';
    $gb_post->gender = (isset($HTTP_POST_VARS["gb_gender"])) ? $HTTP_POST_VARS["gb_gender"] : '';
    $gb_post->userfile = (isset($HTTP_POST_FILES["userfile"]["tmp_name"]) && $HTTP_POST_FILES["userfile"]["tmp_name"] != "") ? $HTTP_POST_FILES : '';
    $gb_post->user_img = (isset($HTTP_POST_VARS["gb_user_img"])) ? $HTTP_POST_VARS["gb_user_img"] : '';
    $gb_post->preview = (isset($HTTP_POST_VARS["gb_preview"])) ? 1 : 0;
    $gb_post->private = (isset($HTTP_POST_VARS["gb_private"])) ? 1 : 0;
    echo $gb_post->process($HTTP_POST_VARS["gb_action"]);
} else {
    echo $gb_post->process();
}

?>

I don't know about the footer...I didn't mess with it. That could something...

Form.php

if(document.book.keycode.value == "") {
	alert("You Must Enter The Image Verification Characters Into The Box");
	document.book.keycode.focus();
	return false;
	}
	 flag=1;

return true;
}
function trim(value) {
 startpos=0;
 while((value.charAt(startpos)==" ")&&(startpos<value.length)) {
   startpos++;
 }
 if(startpos==value.length) {
   value="";
 } else {
   value=value.substring(startpos,value.length);
   endpos=(value.length)-1;
   while(value.charAt(endpos)==" ") {
     endpos--;
   }
   value=value.substring(0,endpos+1);
 }
 return(value);
}
function emoticon(text) {
  text = ' ' + text + ' ';
  if (document.book.gb_comment.createTextRange && document.book.gb_comment.caretPos) {
   var caretPos = document.book.gb_comment.caretPos;
   caretPos.text = caretPos.text.charAt(caretPos.text.length - 1) == ' ' ? text + ' ' : text;
   document.book.gb_comment.focus();
  } else {
    document.book.gb_comment.value  += text;
	document.book.gb_comment.focus();
  }
}
//-->
</script>
<table border="0" cellspacing="0" cellpadding="2" align="center" width="$VARS[width]">
  <tr>
   <td height="45"><b><font size="4" face="$VARS[font_face]" color="$VARS[text_color]">$LANG[BookMess3]</font></b></td>
   <td height="45">&nbsp;</td>
 </tr>
 <tr>
   <td width="56%" valign="bottom" class="font2">$LANG[FormMess1]</td>
   <td width="44%" align="right" valign="bottom" class="font2"><b><img src="$GB_PG[base_url]/img/return.gif" width="10" height="10">
     <a href="$GB_PG[index]">$LANG[BookMess4]</a> | <img src="$GB_PG[base_url]/img/lock.gif" width="9" height="11"> <a href="$GB_PG[admin]">$LANG[BookMess5]</a></b></td>
 </tr>
</table>
<form method="post" action="$GB_PG[addentry]" name="book" enctype="multipart/form-data" onsubmit="return checkForm()">
<table border="0" cellspacing="1" cellpadding="4" width="$VARS[width]" align="center" bgcolor="$VARS[tb_bg_color]">
  <tr>
    <td colspan="2" bgcolor="$VARS[tb_hdr_color]"><b><font size="2" face="$VARS[font_face]" color="$VARS[tb_text]">$LANG[BookMess3]:</font></b></td>
  </tr>
  <tr bgcolor="$VARS[tb_color_1]">
    <td width="25%" class="font1"><img src="$GB_PG[base_url]/img/user.gif" width="16" height="15"> $LANG[FormName]*:</td>
    <td><input type="text" name="gb_name" size="42" maxlength="30"></td>
  </tr>
  <tr bgcolor="$VARS[tb_color_1]">
    <td width="25%" class="font1"><img src="$GB_PG[base_url]/img/email.gif" width="15" height="15"> $LANG[FormEmail]:</td>
    <td><input type="text" name="gb_email" size="42" maxlength="30"></td>
  </tr>
  <tr bgcolor="$VARS[tb_color_1]">
    <td width="25%" class="font1"><img src="$GB_PG[base_url]/img/location.gif" width="16" height="16"> $LANG[FormLoc]:</td>
    <td><input type="text" name="gb_location" size="42" maxlength="30"></td>
  </tr>
  <tr bgcolor="$VARS[tb_color_1]">
    <td width="25%" class="font1"><img src="$GB_PG[base_url]/img/home.gif" width="16" height="16"> $LANG[FormUrl]:</td>
    <td><input type="text" name="gb_url" size="42" value="http://" maxlength="45"></td>
  </tr>

$OPTIONAL

<tr bgcolor="$VARS[tb_color_1]">
    <td width="25%" valign="top" class="font1">$LANG[FormMessage]*:
    <br><br>
     <table border="0" cellspacing="0" cellpadding="6" align="center">
          <tr align="center" valign="middle"> 
            <td><a href="javascript:emoticon(':-)')"><img src="$GB_PG[base_url]/img/smilies/a1.gif" border="0"></a></td>
            <td><a href="javascript:emoticon(':-(')"><img src="$GB_PG[base_url]/img/smilies/a2.gif" border="0"></a></td>
            <td><a href="javascript:emoticon(';-)')"><img src="$GB_PG[base_url]/img/smilies/a3.gif" border="0"></a></td>
          </tr>
          <tr align="center" valign="middle"> 
            <td><a href="javascript:emoticon(':o')"><img src="$GB_PG[base_url]/img/smilies/a4.gif" border="0"></a></td>
            <td><a href="javascript:emoticon(':D')"><img src="$GB_PG[base_url]/img/smilies/a5.gif" border="0"></a></td>
            <td><a href="javascript:emoticon(':p')"><img src="$GB_PG[base_url]/img/smilies/a6.gif" border="0"></a></td>
          </tr>
          <tr align="center" valign="middle"> 
            <td><a href="javascript:emoticon(':cool:')"><img src="$GB_PG[base_url]/img/smilies/a7.gif" border="0"></a></td>
            <td><a href="javascript:emoticon(':rolleyes:')"><img src="$GB_PG[base_url]/img/smilies/a8.gif" border="0"></a></td>
            <td><a href="javascript:emoticon(':mad:')"><img src="$GB_PG[base_url]/img/smilies/a9.gif" border="0"></a></td>
          </tr>
          <tr align="center" valign="middle"> 
            <td><a href="javascript:emoticon(':eek:')"><img src="$GB_PG[base_url]/img/smilies/a10.gif" border="0"></a></td>
            <td><a href="javascript:emoticon(':-)')"><img src="$GB_PG[base_url]/img/smilies/a1.gif" border="0"></a></td>
            <td><a href="javascript:emoticon(':confused:')"><img src="$GB_PG[base_url]/img/smilies/a11.gif" border="0"></a></td>
          </tr>
          <tr align="center">
            <td colspan="3"> 
              <div align="center" class="font2"><a href="javascript:openCentered('$LANG_CODES','codes','640','450','scrollbars=yes')">$LANG[FormMess4]</a>
              </div>
            </td>
          </tr>
        </table>
    </td>
    <td bgcolor="$VARS[tb_color_1]" valign="top"><textarea name="gb_comment" cols="41" rows="11" wrap="VIRTUAL"></textarea><br>
     <input type="checkbox" name="gb_private" value="1"> <font size="1" face="$VARS[font_face]">$LANG[FormPriv]</font>
    </td>
  </tr>

<tr bgcolor="$VARS[tb_color_1]">
	     <td width="25%" class="font1">Image Verification:&nbsp;<input type="hidden" name="rand" value="$Vrand"></td> 
	     <td>Enter these characters <img src="verifyimage.php?k=$Vrand" alt="Enter these characters into the textbox on the right" height="18" width="75"> into this text box <input type="text" size="8" maxlength="8" name="keycode" value="$_POST[rand]"></td>
	</tr>
	  <tr bgcolor="$VARS[tb_color_1]">
	    <td width="25%"><div align="left" class="font2">$HTML_CODE<br />$SMILE_CODE<br />$AG_CODE</div></td>
	    <td>

add.class.php

<?php
/**
 * ----------------------------------------------
 * Advanced Guestbook 2.3.1 (PHP/MySQL)
 * Copyright (c)2001 Chi Kien Uong
 * URL: http://www.proxy2.de
 * ----------------------------------------------
 */

class addentry {

var $db;
    var $ip;
    var $include_path;
    var $template;
    var $name = '';
    var $email = '';
    var $url = '';
    var $comment = '';
    var $location = '';
    var $icq = '';
    var $aim = '';
    var $gender = '';
    var $userfile = '';
    var $user_img = '';
    var $preview = '';
    var $private = '';
    var $image_file = '';
    var $image_tag = '';
    var $GB_TPL = array();
    var $table = array();
    var $Vrand = '';

function undo_htmlspecialchars($string) {
        $html = array (
            "&amp;"  => "&",
            "&quot;" => "\"",
            "&lt;"   => "<",
            "&gt;"   => ">"
        );
        for(reset($html); $key=key($html); next($html)) {
            $string = str_replace("$key","$html[$key]",$string);
        }
        return ($string);
    }

$HIDDEN .= "<input type=\"hidden\" name=\"gb_email\" value=\"".$this->email."\">\n";
        $HIDDEN .= "<input type=\"hidden\" name=\"gb_url\" value=\"".$this->url."\">\n";
        $HIDDEN .= "<input type=\"hidden\" name=\"gb_comment\" value=\"".$this->comment."\">\n";
        $HIDDEN .= "<input type=\"hidden\" name=\"gb_location\" value=\"".$this->location."\">\n";
        if ($this->image_file) {
            $HIDDEN .= "<input type=\"hidden\" name=\"gb_user_img\" value=\"".$this->image_file."\">\n";
        }
        if ($this->private==1) {
            $HIDDEN .= "<input type=\"hidden\" name=\"gb_private\" value=\"".$this->private."\">\n";
        }
        if ($this->db->VARS["allow_gender"]==1) {
            $HIDDEN .= "<input type=\"hidden\" name=\"gb_gender\" value=\"".$this->gender."\">\n";
        }
        if ($this->icq && $this->db->VARS["allow_icq"]==1) {
            $HIDDEN .= "<input type=\"hidden\" name=\"gb_icq\" value=\"".$this->icq."\">\n";
        }
        if ($this->aim && $this->db->VARS["allow_aim"]==1) {
            $HIDDEN .= "<input type=\"hidden\" name=\"gb_aim\" value=\"".$this->aim."\">\n";
        }
        $row['name'] = $this->name;
        $row['location'] = $this->location;
        $row['email'] = $this->email;
        eval("\$GB_PREVIEW = \"".$this->template->get_template($this->GB_TPL['prev_entry'])."\";");
        eval("\$preview_html = \"".$this->template->get_template($this->GB_TPL['header'])."\";");
        eval("\$preview_html .= \"".$this->template->get_template($this->GB_TPL['preview'])."\";");
        eval("\$preview_html .= \"".$this->template->get_template($this->GB_TPL['footer'])."\";");
        return $preview_html;
    }

function process($action='') {
        switch ($action) {
            case $this->db->LANG["FormSubmit"]:
                if ($this->preview==1) {
                    $this->comment = $this->undo_htmlspecialchars($this->comment);
                    $this->name = $this->undo_htmlspecialchars($this->name);
                }
                $this->clear_tmpfiles();
                $status = $this->check_entry();
                return ($status == 1) ? $this->add_guest() : $status;
                break;

case $this->db->LANG["FormPreview"]:
                $status = $this->check_entry("preview");
                return ($status == 1) ? $this->preview_entry() : $status;
                break;

default:
                return $this->form_addguest();
        }
    }

}

?>

I am pretty sure I've followed to the letter but as everything in life I could be wrong. Did I say thank you for helping me.

should be

find

and make it

I left the first instruction out and only discovered the preview error yesterday.

I have installed and updated all the necessary files, but must have missed something somewhere.
In adding a new guestbook (v 2.3.1) entry, the form is ok - shows verification line, generated Image numbers, and acceptance box. If I do not enter anything into the acceptance box, ie leave blank, I get the pop-up saying I must enter the characters - ok.
If I enter just 1 character, or any amount of characters, whether they be the random image chars or not, the entry passes the test and gets added to the guestbook.
Initially in the form.php I had to add the $GB_PG[base_url] to get the Image to display. ie :
<tr bgcolor="$VARS[tb_color_1]">
<td width="25%" class="font1">Image Verification: <input type="hidden" name="rand" value="$Vrand"></td>
<td>Enter these characters
<img src="$GB_PG[base_url]/verifyimage.php?k=$Vrand" alt="Enter these characters into the textbox on the right" height="18" width="75"> into this text box <input type="text" size="8" maxlength="8" name="keycode" value="$_POST[rand]"></td>
</tr>

Any other ideas?

Thanks in anticipation.

Paul ( www.1820Settlers.com )

If it's not verifying if the code is correct or not then the error must lie in the the lib/add.class.php file. Check that you have added everything to that as per the instructions.

Hi Carbonize,

I've checked my add.class.php code and compared it to the earlier post above, plus the corrections, and there is no difference. Still won't verify. Any other pointers?

Paul

Redownload the verification.zip file then go through the instructions step by step just to make sure. ALso make sure you have the verify.php and verifyimage.php fils in the same folder as addentry.php. I'm at work right now but if you still can't get it to work I will try and upload a zip containing pre modded files.

Started afresh.. Re-extracted the base files from the guestbook original download. Downloaded your verification.zip again, and went very slowly cut'n'paste all the requirements. ftp'd the files up to correct directories on website. Exactly the same results. Did not display the generated Image on first entry to the 'sign the guestbook'. Added the $GB_PG[base_url] as per earlier post, , re-ftp'd, and then it displayed the Image. Something I didn't notice before was that when I 'previewed' the entry and then clicked Go Back, the Image is not redisplayed unless I refresh the page.
Me thinks it has to be something to do with the path or folder structure?

PaulTT www.1820settlers.com

Send me the three files addentry.php lib/add.class.php and templates/form.php I think I know what is missing but I want to make sure.

The above post was me

Do you know why this and the other scripts will not work in phpnuke?

I have two guestbooks, one in a phpnuke module. Using duplicate copies of the files, the first guestbook is fine, but the one in th phpnuke module won't show the image.

Same problem with other scripts, like admin logout redirect and renaming the admin file.