BkrBkr / AuthCaptchaForJoomla

Joomla has no built-in BruteForce protection. This Joomla System plugin fills this gap by adding a captcha challenge to all Joomla login forms. It slows down the attack considerably and therefore prevents it.
GNU General Public License v3.0
3 stars 2 forks source link

Turnstile will not work when logging in #4

Closed viperdriver100 closed 2 years ago

viperdriver100 commented 2 years ago

Hi,

I installed Turnstile for Joomla: https://github.com/SharkyKZ/joomla-turnstile-plugin/releases

1-It will work if I simply do the native thing from Joomla, like "Forgot PW or email

Screenshot 2022-10-08 at 09 57 34

2- It will not work if I log in from the front end with AuthCaptchaForJoomla enabled. It will end up with the error that there is no valid Captcha. However, this DOES work with captcha or Google re-Captcha

Screenshot 2022-10-08 at 10 01 39 Screenshot 2022-10-08 at 10 02 08

I am very happy with your plugin, and I can't do without so I would continue with hCaptcha. However, could you please have a look?

1 - Debug Mode on does not give me anything 2- Error reporting does not help either

BkrBkr commented 2 years ago

Thanks for your request. I just merged the changes proposed by @SharkyKZ and published a new release. Unfortunately I hadn't had time to test your captcha plugin yet. Could you please install the release and give me a feedback, if it already fixes your issue? The new Version can be found in the release section. It is not deployed via the Joomla Plugin Updates yet.

viperdriver100 commented 2 years ago

I have replaced the authcaptcha.php file as it was suggested by SharkyKZ. That is working. However, MoreForms from https://morejoomla.com/products/yootheme-builder/more-form will not send the email, although they claim that they solely use whatever is in Joomla by default. That would mean that they would not be the ones causing the issue in their plugin. But I do not know how that exactly works. I reported to MoreJoomla, but they did not respond yet.

BkrBkr commented 2 years ago

Thank you for your feedback. As I understand it your intial issue is solved, correct? AuthCaptcha for Joomla is meant to add a captcha to the Login Module/Component (including the admin page) of Joomla. It is not meant to be used with other plugins and will not add a captcha there. Therefor your issue might be related to Turnstyle or MoreForm, but not to this plugin.

viperdriver100 commented 2 years ago

Ok, I tested with only Turnstile enabled and it failed, so I guess you are right about MoreForms :-) However, your updated plugin does not work yet.

I try to attach the version that will work for me.

Screenshot 2022-10-10 at 17 45 26

authcaptcha.php.zip

BkrBkr commented 2 years ago

Unfortunately the provided file does not work for Joomla 4 with recaptcha. I found out that you can use Turnstile only if you register a domain at cloudflare. This means I can't test it. I made another fix that may address your problem. Would you mind to test it? authcaptcha.zip

viperdriver100 commented 2 years ago

This file here works perfectly. authcaptcha-modified-10-oct-2022.zip

You only have to add a domain (free) at Cloudflare. You do not need to buy a domain name.

viperdriver100 commented 2 years ago

No, I am sorry, your plugin still does not work after the edits

Screenshot 2022-10-10 at 19 33 09
BkrBkr commented 2 years ago

Unfortunately I don't have a test environment for Turnstile right now and I wasn't able to detect your problem. Therefore I won't support Turnstile at the moment.

viperdriver100 commented 2 years ago

The problem has been solved in the attached file. It works. What do you need from me to test it? I an I will provide.

BkrBkr commented 2 years ago

The provided file is not working and will not be adapted.