Only registered users can see links on this board! Get registered or login to the forums!
just wanted to post that link, to point out where (i think) the idea for that code came from and give the original author a little credit.
by the way, the output that that script creates is far from un-readable by OCR programs. the contrast is far too high; simply adding background color behind some text doesn't make it more difficult to decipher.
Joined: Aug 27, 2002 Posts: 16987 Location: Kansas
Posted:
Wed Jan 28, 2004 2:01 pm
I'm not sure what code you are referring to, but my original post was not pirated from anywhere. I do not do that, nor do I need to. The image routines are far from anyone's intellectual property and are standard API calls. There are countless "How To's" out there that use these calls and are way older than that article of 10/18/2003 from NC. And nowhere do I state about trying to be unreadable by OCR! The subject line says it all "Tired of the same old dreary Security Graphic".
nickeby wrote:
just wanted to post that link, to point out where (i think) the idea for that code came from and give the original author a little credit.
In the future if you think that someone needs credit I would appreciate an email or a PM before you accuse or state what you think in public.
sorry, got too close to the pirated-code accusation. i thought you might have used that other algorithm as the basis for yours; since both are basically the same- write some colored arcs/ellipses in random colors, with a random string on top. i apologize for the original tone of that posting. the code you posted is not ripped from that code on nukecops.
to the other point... the function these security graphics are supposed to serve is to be unreadable by character-recognition programs, right? because if it's easily readable by an OCR, then somebody can write a few scripts to fill out your forms or whatnot, almost as easily as if the security graphic weren't there at all.
Joined: Aug 27, 2002 Posts: 16987 Location: Kansas
Posted:
Wed Jan 28, 2004 2:19 pm
I'll stand down from defcon 1 now . As a developer myself I am very careful, as I can be, to give credit where credit is due. I appreciate your follow-up.
Actually, in the case of Nuke, the graphic is meant more to discourage bots and automated programs from getting at your site by guessing the algorithm. For that purpose it bodes quite well. To your point though, if you are a security nut , then you will require more of a smear type graphic.
Joined: Dec 13, 2003 Posts: 94 Location: Finland (EU)
Posted:
Sun Nov 21, 2004 10:31 pm
Cheers,
As per reading the Raven's post today "initially", I decided to make some experiments based on the presented Code Examples. The attached piece of code is an indirect shameless application based on Raven's Code Example (functional!) and the NC Code Example (disfunctional!).
The set goal was to have the output being distorded in such "deterministic" way that the Security Code would be more harder to read by an OCR - this was achieved by applying a provocative DUPLICATE key generation in close vicinity of each "main key". (=> Gone fishing. Me thinks me fisherman, OCR fish.)
Emphasized:
Quote:
* random size constraints narrowed --> higher probability for appearing non-overlapping visible DUPLICATE KEYS (X-axis; Y-axis)
* randow x-axis deviation offset increased --> higher probability for appearing non-overlapping (X-axis shift/drift)
<=> All this carried out to require "more human intelligence" around to read it out, ie. to make it harder for OCR.
The OCR resistance can be hardened/fine-tuned accordingly even further, however this will suit to my personal purposes in the first place (time will tell, whether I should reconsider updating "Security Code" generation mechanism in the future).
In case that you are interested in the actual output, you may want see "Security Code" in action at URL :
Only registered users can see links on this board! Get registered or login to the forums!
Joined: Sep 13, 2005 Posts: 259 Location: Cornfields of Indiana
Posted:
Wed Jul 19, 2006 12:40 pm
is there an update for this in newer version of PHP-Nuke that do not have the function gfx in the moduel/Your_Account/index.php file?
Raven's distro 7.6
Also, I have searched and found various suggestions in the forums here for changing the length of the code, form 6 digits to 8, but nothing works that was suggested
Joined: Sep 13, 2005 Posts: 259 Location: Cornfields of Indiana
Posted:
Wed Jul 19, 2006 5:33 pm
Hi Guardian,
I was referring to first thread in this topic discussion. My security image shows as it should using the settings in config.php, however, I would like to know how to "spice up" the security image using the code Raven posted, and also how to make the Security image code more than 6 digits.
View next topic View previous topic
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
![[Valid RSS]](http://www.ravenphpscripts.com/images/valid-rss.png "Validate my RSS feed"){kind=small}
:: 
::
. As a developer myself I am very careful, as I can be, to give credit where credit is due. I appreciate your follow-up.
, then you will require more of a smear type graphic.
