search

dsoares / roundcube-rcguard

Roundcube plugin to enforce reCAPTCHA for users who have too many failed logins.
24 stars 10 forks source link

CAPTCHA verification is empty with timed out log error #39

Closed arafatx closed 3 years ago

arafatx commented 3 years ago

Plugin is configured correctly, it does show the recaptcha box if I hit the maximum login retries but it never gets through this verification box and it shows a message 'CAPTCHA verification is empty' eventhough I have supplied the correct answer. I look at the error log from roundcube and this is what I get:

[27-Dec-2020 11:48:19 Asia/Kuala_Lumpur] PHP Warning: file_get_contents(https://www.google.com/recaptcha/api/siteverify): failed to open stream: Connection timed out in /var/www/html/roundcubemail-1.4.9/plugins/rcguard/lib/recaptchalib.php on line 95

Step to reproduce (for v2 repatcha):

1) Login without hitting the maximum failed retries: Can login normally 2) If hit maximum failed retries (default 5 times), the verification recaptcha box will appear, then I put correct username and password, solved the recaptcha with green tick appear 3) Then I click Login, it's loading and seems stuck, within few seconds I got an error message from recaptcha like in the screenshot:

image

This seems to be related to https://github.com/dsoares/roundcube-rcguard/issues/32

Note that this happen with both v3 and v2 API. As you know that v3 doesn't have any input to solve recaptcha, it still show that message Verification is empty.

arafatx commented 3 years ago

I found out the problem is caused by nginx. Restarting server solved this immediately.