https://community.jforum.net/posts/list/3.page JForum - http://www.jforum.net https://community.jforum.net/posts/preList/49/171.page https://community.jforum.net/posts/preList/49/171.page GMT [code]# ########
# Captcha
# ########
captcha.registration = true
captcha.posts = true
captcha.ignore.case = true

captcha.width = 250
captcha.height = 75

captcha.min.words = 4
captcha.max.words = 6

captcha.min.font.size = 25
captcha.max.font.size = 35[/code]

And if you want to match captcha case, change captcha.ignore.case to false.
Add the setting into your jforum's WEB-INF/config/jforum-custom.conf to override the default setting:
[code]captcha.ignore.case = false[/code]]]> https://community.jforum.net/posts/preList/49/172.page https://community.jforum.net/posts/preList/49/172.page GMT
I check the configuration files. Our installation uses the Captcha default configuration as what you show in your answer. And there isn't any Captcha related configuration in the jforum-custom.conf file. The version number is 2.3.5-SNAPSHOT. I can make a post without entering any text in the Captcha field. Any other configuration would change the behaviour? I hope that I don't need to turn on the debugger to find the cause of this problem at PostAction class.]]> https://community.jforum.net/posts/preList/49/175.page https://community.jforum.net/posts/preList/49/175.page GMT https://community.jforum.net/posts/preList/49/177.page https://community.jforum.net/posts/preList/49/177.page GMT https://community.jforum.net/posts/preList/49/178.page https://community.jforum.net/posts/preList/49/178.page GMT https://community.jforum.net/posts/preList/49/180.page https://community.jforum.net/posts/preList/49/180.page GMT
I am not sure what system configuration you need.

With a debugger, I find the problem is on the following line:
[code]
boolean needCaptcha = SystemGlobals.getBoolValue(ConfigKeys.CAPTCHA_POSTS)
&& request.getSessionContext().getAttribute(ConfigKeys.REQUEST_IGNORE_CAPTCHA) == null;

if (needCaptcha && !us.validateCaptchaResponse(this.request.getParameter("captcha_anwser"))) {
this.context.put("post", post);
this.context.put("start", this.request.getParameter("start"));
this.context.put("error", I18n.getMessage("CaptchaResponseFails"));
this.insert();
return;
}
[/code]
and the cause is in the following method:
[code]
public boolean validateCaptchaResponse(String origUserResponse)
{
String userResponse = origUserResponse;
if ((SystemGlobals.getBoolValue(ConfigKeys.CAPTCHA_REGISTRATION)
|| SystemGlobals.getBoolValue(ConfigKeys.CAPTCHA_POSTS))
&& this.imageCaptcha != null) {

if (SystemGlobals.getBoolValue(ConfigKeys.CAPTCHA_IGNORE_CASE)) {
userResponse = userResponse.toLowerCase(Locale.US);
}

final boolean result = this.imageCaptcha.validateResponse(userResponse).booleanValue();
this.destroyCaptcha();
return result;
}

return true;
}
[/code]
The condition check line
[code]
SystemGlobals.getBoolValue(ConfigKeys.CAPTCHA_REGISTRATION)
|| SystemGlobals.getBoolValue(ConfigKeys.CAPTCHA_POSTS))
&& this.imageCaptcha != null
[/code]
returns false. And I find the this.imageCaptcha is null and that alone can make the condition false. So why it is null then?
]]> https://community.jforum.net/posts/preList/49/182.page https://community.jforum.net/posts/preList/49/182.page GMT When the Captcha engine is not ready, the imageCaptcha will return null.
A quick fix is to replace the last return statement from return [color=blue]true[/color] to return [color=red]false[/color].

[code] public boolean validateCaptchaResponse(String origUserResponse)
{
String userResponse = origUserResponse;
if ((SystemGlobals.getBoolValue(ConfigKeys.CAPTCHA_REGISTRATION)
|| SystemGlobals.getBoolValue(ConfigKeys.CAPTCHA_POSTS))
&& this.imageCaptcha != null) {

if (SystemGlobals.getBoolValue(ConfigKeys.CAPTCHA_IGNORE_CASE)) {
userResponse = userResponse.toLowerCase(Locale.US);
}

final boolean result = this.imageCaptcha.validateResponse(userResponse).booleanValue();
this.destroyCaptcha();
return result;
}

return false;
}[/code]]]> https://community.jforum.net/posts/preList/49/183.page https://community.jforum.net/posts/preList/49/183.page GMT When the Captcha engine is not ready, the imageCaptcha will return null.
A quick fix is to replace the last return statement from return [color=blue]true[/color] to return [color=red]false[/color].

[code] public boolean validateCaptchaResponse(String origUserResponse)
{
String userResponse = origUserResponse;
if ((SystemGlobals.getBoolValue(ConfigKeys.CAPTCHA_REGISTRATION)
|| SystemGlobals.getBoolValue(ConfigKeys.CAPTCHA_POSTS))
&& this.imageCaptcha != null) {

if (SystemGlobals.getBoolValue(ConfigKeys.CAPTCHA_IGNORE_CASE)) {
userResponse = userResponse.toLowerCase(Locale.US);
}

final boolean result = this.imageCaptcha.validateResponse(userResponse).booleanValue();
this.destroyCaptcha();
return result;
}

return false;
}[/code][/quote]

With the change, I can't pass Captcha with a correct matched text.

Also, I do notice that the Captcha comes up late. A message "Captcha unavailable" shows up first.

I also try to use the new method I create:
[code]
private ImageCaptcha testImageCaptcha(){
if(this.imageCaptcha == null)
this.imageCaptcha = Captcha.getInstance().getNextImageCaptcha();

return this.imageCaptcha;
}
[/code]
and call this method instead of this.imageCaptcha in this.imageCaptcha != null. The change, however, blocks Captcha - I can't pass Captcha with a matched characters.
]]> https://community.jforum.net/posts/preList/49/184.page https://community.jforum.net/posts/preList/49/184.page GMT https://community.jforum.net/posts/preList/49/185.page https://community.jforum.net/posts/preList/49/185.page GMT
I run it in Tomcat on Windows 7. I can't see how the problem relates with those systems.]]> https://community.jforum.net/posts/preList/49/186.page https://community.jforum.net/posts/preList/49/186.page GMT JForum will disable the submit button until the captcha image is fully loaded.
Please check out and test if this works.]]> https://community.jforum.net/posts/preList/49/188.page https://community.jforum.net/posts/preList/49/188.page GMT JForum will disable the submit button until the captcha image is fully loaded.
Please check out and test if this works.[/quote]

Thanks. I am current working on other tasks. I will report back once I have a chance to test it out. I need to remind our integration build team to get the latest version of JForum.]]> https://community.jforum.net/posts/preList/49/189.page https://community.jforum.net/posts/preList/49/189.page GMT i have installed jForum 2.3.5 in my localhost and in the live server. The captcha verification is working on my localhost, but it is not working on my server. So, currently i have disabled the captcha verification. Any suggestion, how to fix this problem?]]> https://community.jforum.net/posts/preList/49/439.page https://community.jforum.net/posts/preList/49/439.page GMT And see if there are some error messages as a hint for what's going wrong there.
Also, you'd better provide some environment information like OS version, Java version, etc.

Since JForum use JCaptcha as the capacha engine, you can check the [url=https://jcaptcha.atlassian.net/wiki/display/general/FAQ]FAQ[/url] on JCaptcha project website.
For Example, if you're running JForum on Linux server, you have to set the option in your JAVA_OPTS
[code]-Djava.awt.headless=true[/code]

BTW, JForum 2.3.5 is not secure, you'd better install JForum 2.4.0 or later.]]> https://community.jforum.net/posts/preList/49/440.page https://community.jforum.net/posts/preList/49/440.page GMT [Wed Apr 08 03:11:36 EDT 2015] [Info] CsrfGuard analyzing request /forum/js/list/userLocalTime.page
[Wed Apr 08 03:11:36 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:11:39 EDT 2015] [Info] CsrfGuard analyzing request /forum/user/insert.page
[Wed Apr 08 03:11:39 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:11:41 EDT 2015] [Info] CsrfGuard analyzing request /forum/user/acceptAgreement.page
[Wed Apr 08 03:11:42 EDT 2015] [Info] CsrfGuard analyzing request /forum/user/insert.page
[Wed Apr 08 03:11:42 EDT 2015] [Info] CsrfGuard analyzing request /forum/captcha/generate/1428477102005.page
[Wed Apr 08 03:11:42 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:12:43 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:12:47 EDT 2015] [Info] CsrfGuard analyzing request /forum/captcha/generate.page
[Wed Apr 08 03:13:22 EDT 2015] [Info] CsrfGuard analyzing request /forum/jforum.page
[Wed Apr 08 03:13:23 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:13:23 EDT 2015] [Info] CsrfGuard analyzing request /forum/captcha/generate/1428477202359.page
[Wed Apr 08 03:14:24 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:15:25 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:16:25 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:17:26 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:18:27 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:19:28 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:20:28 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:21:29 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:22:30 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:23:31 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:24:32 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:25:32 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:26:33 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:27:34 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:28:35 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:29:35 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:30:36 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp
[Wed Apr 08 03:31:37 EDT 2015] [Info] CsrfGuard analyzing request /forum/ping_session.jsp




the captcha image is loaded in shows the tomcat log files..

how to set tomcat JAVA_OPTS="-Djava.awt.headless=true" ????
which tomcat file to edit?... any sug???



]]> https://community.jforum.net/posts/preList/49/451.page https://community.jforum.net/posts/preList/49/451.page GMT
The content of my setenv.sh is as follows:
[code]
JAVA_HOME="/usr/java/latest"
JAVA_OPTS="-server -XX:NewSize=123m -XX:MaxNewSize=123m -XX:SurvivorRatio=8 -Xss256k -Xms495m -Xmx495m -Djava.net.preferIPv4Stack=true -Djava.awt.headless=true"
[/code]

You can modify the other memory size options according to your server's capacity.

Reference:
http://www.andowson.com/posts/list/556.page]]> https://community.jforum.net/posts/preList/49/452.page https://community.jforum.net/posts/preList/49/452.page GMT