denghuafeng / jforum2

Automatically exported from code.google.com/p/jforum2
Other
0 stars 0 forks source link

Disable CAPTCHA for Administrators / Moderators - patch. #42

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Captcha cannot be disabled for Admins / Moderators
2.
3.

What is the expected output? What do you see instead?
Since Admins / Moderators post also, for them it is very difficult to type the 
Captcha everytime.

What version of the product are you using? On what operating system,
database, and application server/servlet container?
* Product: JForum 2.3.4
* OS: Windows
* DB: MySQL
* AP: Tomcat

Please provide any additional information below.

I'm a moderator of one of the forums using jForum2 and once I had access to the 
moderators area, I discovered that people complained a lot about Captcha. It is 
a welcomed measure against anti-spam but Administrators can delete the whole 
database so Captcha doesn't serve any purpose against them.

I've created a small patch to fix this.

a) It adds a new entry in the Configuration screen named "Enable Captcha For 
Admins / Moderators" with the default value False.
b) It changes the CAPTCHA_POST detection so that userId is also taken into 
account.

It only ignores CAPTCHA_POST for for PERM_MODERATION / PERM_ADMINISTRATION but 
Not for PERM_MODERATION with a specific forumId, which means that it will work 
for Administrators / Global Moderators but not for the moderators of a specific 
forum.

Original issue reported on code.google.com by zburlind...@gmail.com on 9 Feb 2013 at 2:32

Attachments:

GoogleCodeExporter commented 9 years ago
I think that perhaps removing captcha for posting is fine.  But I think that 
running sql commands should require a captcha challenge per line ;-)  That way 
you don't accidentally delete the database.

Original comment by colton.e...@sparksisthegeek.com on 5 Jun 2013 at 12:31

GoogleCodeExporter commented 9 years ago
How about commit this patch yourself? Please write an email to 
me(andowson@gmail.com) and tell me your googlecode account.

Original comment by andow...@gmail.com on 20 Jul 2014 at 10:12