Including a Captcha

Craig

Is it possible to have a captcha included in the forms? for E.g in one of the data entry forms i need an additional field for users to enter a captcha which is then validated against the database.. can i accomplish this in Aware IM??

tazzmaxx

reCAPTCHA (which is used on Facebook, Ticketmaster, and Craigslist) has a JAVA plugin of their CAPTCHA product available at the following url:

http://recaptcha.net/resources.html

Not sure how/if this can be integrated with Aware but it appears to be free and might be worth the effort to try and get it working.

If you do get the plugin working you can send it (with the necessary process) to reCAPTCHA and they will post it as a plugin solution for Aware which would be great advertising for Aware and a great resource for other developers. The more that Aware is seen on other sites the better.

aware_support

Re-Captcha has been integrated in Aware IM in version 4.95

Powerm

How to use it ? Did not find the option...
Thanks :roll:

aware_support

You need to use a different logon page - the one that supports CAPTCHA. The URL for this page is:

http://localhost:8080/AwareIM/logon_captcha.html

Note that this HTML page is VERY basic. You can use HTML editor to add your own logos and other bits and pieces (as long as you keep the important part - you will know it when you see it)

asawyer13

I want to use a Captcha on a Contact Us form so that a human will actually have to enter something so that they can contact us.

Is this possible?

Alan

aware_support

You can create this page outside Aware IM and then integrate it into your Aware IM application. Aware IM only handles CAPTCHA for logging in.

asawyer13

Thanks

robleer

@Aware_support

I tried to integrate a page with a Google Recaptcha.

I've added this DIV (plus a javascript of course) on a panel in the VP (and other places to try to display a google captcha):

But somehow Aware does not display this DIV. When I look at the source of the HTML I see that e.g. the " is changed into ".

This does not work then of course. I

customaware

Hi Rob,

Why are you adding this in a VP?

I would have though you would add it to the login html page.

Once you are at the VP surely the login has already been performed.

Can you please explain.

robleer

Hi Eagle,

Because it is NOT for the login process, but for the creation of a new user.

The process shoudl be something like this:

The guest is on the Guest VP and clicks on 'Self registration'.
Then a new BO is created, the users fills in a username and a password and saves the BO.

But to prevent that a script kiddy loads my database with fake accounts I want a Captcha to prove the user is not a robot.

First I tried to display the Google Recaptcha on several places in Aware, just to try if I can get something like that to work.

I tried to put in onto the BO form, onto the VP in a panel a.s.o. but nothing works and Aware messes up my custom HTML additions.

customaware

Hi Rob,

Ah... OK. I understand now.

I have never done it but if the method you have is just javascript then it should be able to be integrated.

Where are you loading the script?
Seperate .js file and loaded in startup.html?

This is how it should be done... not in an html attribute cell.

I have a call to js in a cell and the double quotes are fine.

I dont think it will be in a VP.

It will need to work on the RegularUser BO form that is designated for New User Registration.

If you are happy to PM it to me I'd be happy to try and get it to work unless someone has already done it and can provide a suitable solution.

robleer

Hi Marc,

Thanks for your help so far.

I just trying to find a way to prevent spambots to enter fake data, so I hope I'm on the right way with my thoughts. Maybe there is an easier way. i not know.

In the Google example is works as follows:

Add a script: <script src='https://www.google.com/recaptcha/api.js'></script> . I've putted this in the startup.html

Then, in the RegularUser form I added:
<div class="g-recaptcha" data-sitekey="my-secret-key"></div>. Of course I enter my secret key there.

Now I've two problems:

The Captcha does not show up because Aware messes up the HTML ( I think)
I do not know yet how to go on after point 1 is solved. How can I prevent to Click the Create button if the Captha is not solved. I have to find this out later on, but I get already stuck in simply displaying the captcha in a BO form.

Before we dig this further out, maybe you know an easier way to stop spambots in these situations??

Thanks,

Rob

customaware

Rob,

As I said, I have not used a captcha service before and I will certainly look into what you are trying to do when I get a spare minute.

However, in the meantime an immediate Aware only solution that springs to mind is as follows.

Create a new BO called Captchas

CaptchaID : Number
CaptchaString : text 20
CaptchaImage : Picture

You can maintain this in the system adding as many string image pairs as you like but I would say you only need say, 10 of them.

Now, when a New user tries to register you randomly pick one of the records from the Captcha file and display it on the registration screen. The new registrant will need to add a captcha value that matches the string for that image.

Might be quick and dirty but saves you having to rely on anything else and would provide same effect.

Will let you know if I have any success with the way you are doing it.

robleer

Hi Mark,

Yes I've thought on this solution also but as long as it is calculated client side, it's not completely safe. The Google Captcha is an Ajax script with a Json reply and the check is done serverside (and therefore safe).

Also the Google Captcha is easy to solve, because they found a better way to find out if you are a robot or not. You do not have to puzzle the unreadable captcha tekst which frustrates the user. So I hoped to get something like this working in my forms.

Thanks for your help so far !

Rob

Powerm

Unfortunately DeathByCapcha is able to bypass those capchas...