htaccess after Chrono-Captcha

time4mambo 10 Dec, 2016
Sorry for my very bad english, please.

The problem:
The Site has in the administrator-dirextory a htaccess-login
On the Site gives many chronoforms with the chron-captcha.
The captcha load a picture from the administrator-directory and on the frontend come a htaccess-login-requester.

See the Screenshot

The HTML-Code:
<div class="gcore-input pull-left gcore-sub-input gcore-display-table" id="fin-captcha2">
<img src="http://www.ing-qc.com/index.php?option=com_chronoforms5&act=render&action=load_captcha&chronoform=Kontaktaufnahme&action_id=16&tvout=ajax&rand=998960317" alt="captcha" id="gcaptcha_16" />

<img src=

"http://www.ing-qc.com/administrator/components/com_chronoforms5/chronoforms/actions/load_captcha/refresh.png" 

border="0" style="padding:0px 0px 15px 10px;" alt="refresh" onclick="document.getElementById('gcaptcha_16').src = 'http://www.ing-qc.com/index.php?option=com_chronoforms5&act=render&tvout=ajax&action=load_captcha&action_id=16&chronoform=Kontaktaufnahme' + '&' + Math.random();" />



I don't find the file with this code. give me the filename, please, then edit this.


Best regards
Axel
GreyHead 10 Dec, 2016
Hi time4mambo,

That is the image file that is dynamically created to show the Captcha image.

If you want to use that Captcha then you will need to allow it in your ,htaccess file; otherwise you can try an different Captcha method.

Bob
GOGOKOM 12 Jan, 2017
administrator/components/com_chronoforms5/chronoforms/actions/load_captcha/refresh.png
copy
images/refresh.png

administrator/components/com_chronoforms5/chronoforms/actions/load_captcha/load_captcha.php
line 19
if((bool)$config->get('refresh_button', 0) === true){
			$form->form['Form']['content'] = str_replace('{captcha_img}', '<img src="'.r_(\GCore\C::get('GCORE_ROOT_URL').'index.php?ext=chronoforms&act=render&action=load_captcha&chronoform='.$form->form['Form']['title'].'&action_id='.$action_id.'&tvout=ajax&rand='.mt_rand()).'" alt="captcha" id="gcaptcha_'.$action_id.'" /><img src="'.\GCore\C::get('GCORE_FRONT_URL').'images/refresh.png" border="0" style="padding:0px 0px 15px 10px;" alt="refresh" onclick="document.getElementById(\'gcaptcha_'.$action_id.'\').src = \''.r_(\GCore\C::get('GCORE_ROOT_URL').'index.php?ext=chronoforms&act=render&tvout=ajax&action=load_captcha&action_id='.$action_id.'&chronoform=').$form->form['Form']['title'].'\' + \'&\' + Math.random();" />', $form->form['Form']['content']);

incomplete solution, does not display the file refresh.png but does not question the mod_rewrite module and asking for login and password
GreyHead 12 Jan, 2017
Hi GOGOKOM,

You can either change the mod_security settings to allow access; or use a different captcha method.

Bob
This topic is locked and no more replies can be posted.