Ticket #954: captcha.diff

modules/captcha/conf.ini

@@ +1 @@
+[CaptchaMgr]
+requiresAuth    = false
+setHeaders=false
+

modules/captcha/fonts/COPYRIGHT.TXT

@@ +1 @@
+Bitstream Vera Fonts Copyright
+
+The fonts have a generous copyright, allowing derivative works (as
+long as "Bitstream" or "Vera" are not in the names), and full
+redistribution (so long as they are not *sold* by themselves). They
+can be be bundled, redistributed and sold with any software.
+
+The fonts are distributed under the following copyright:
+
+Copyright
+=========
+
+Copyright (c) 2003 by Bitstream, Inc. All Rights Reserved. Bitstream
+Vera is a trademark of Bitstream, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the fonts accompanying this license ("Fonts") and associated
+documentation files (the "Font Software"), to reproduce and distribute
+the Font Software, including without limitation the rights to use,
+copy, merge, publish, distribute, and/or sell copies of the Font
+Software, and to permit persons to whom the Font Software is furnished
+to do so, subject to the following conditions:
+
+The above copyright and trademark notices and this permission notice
+shall be included in all copies of one or more of the Font Software
+typefaces.
+
+The Font Software may be modified, altered, or added to, and in
+particular the designs of glyphs or characters in the Fonts may be
+modified and additional glyphs or characters may be added to the
+Fonts, only if the fonts are renamed to names not containing either
+the words "Bitstream" or the word "Vera".
+
+This License becomes null and void to the extent applicable to Fonts
+or Font Software that has been modified and is distributed under the
+"Bitstream Vera" names.
+
+The Font Software may be sold as part of a larger software package but
+no copy of one or more of the Font Software typefaces may be sold by
+itself.
+
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL
+BITSTREAM OR THE GNOME FOUNDATION BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL,
+OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR
+OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT
+SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE.
+
+Except as contained in this notice, the names of Gnome, the Gnome
+Foundation, and Bitstream Inc., shall not be used in advertising or
+otherwise to promote the sale, use or other dealings in this Font
+Software without prior written authorization from the Gnome Foundation
+or Bitstream Inc., respectively. For further information, contact:
+fonts at gnome dot org.
+
+Copyright FAQ
+=============
+
+   1. I don't understand the resale restriction... What gives?
+
+      Bitstream is giving away these fonts, but wishes to ensure its
+      competitors can't just drop the fonts as is into a font sale system
+      and sell them as is. It seems fair that if Bitstream can't make money
+      from the Bitstream Vera fonts, their competitors should not be able to
+      do so either. You can sell the fonts as part of any software package,
+      however.
+
+   2. I want to package these fonts separately for distribution and
+      sale as part of a larger software package or system.  Can I do so?
+
+      Yes. A RPM or Debian package is a "larger software package" to begin 
+      with, and you aren't selling them independently by themselves. 
+      See 1. above.
+
+   3. Are derivative works allowed?
+      Yes!
+
+   4. Can I change or add to the font(s)?
+      Yes, but you must change the name(s) of the font(s).
+
+   5. Under what terms are derivative works allowed?
+
+      You must change the name(s) of the fonts. This is to ensure the
+      quality of the fonts, both to protect Bitstream and Gnome. We want to
+      ensure that if an application has opened a font specifically of these
+      names, it gets what it expects (though of course, using fontconfig,
+      substitutions could still could have occurred during font
+      opening). You must include the Bitstream copyright. Additional
+      copyrights can be added, as per copyright law. Happy Font Hacking!
+
+   6. If I have improvements for Bitstream Vera, is it possible they might get 
+       adopted in future versions?
+
+      Yes. The contract between the Gnome Foundation and Bitstream has
+      provisions for working with Bitstream to ensure quality additions to
+      the Bitstream Vera font family. Please contact us if you have such
+      additions. Note, that in general, we will want such additions for the
+      entire family, not just a single font, and that you'll have to keep
+      both Gnome and Jim Lyles, Vera's designer, happy! To make sense to add
+      glyphs to the font, they must be stylistically in keeping with Vera's
+      design. Vera cannot become a "ransom note" font. Jim Lyles will be
+      providing a document describing the design elements used in Vera, as a
+      guide and aid for people interested in contributing to Vera.
+
+   7. I want to sell a software package that uses these fonts: Can I do so?
+
+      Sure. Bundle the fonts with your software and sell your software
+      with the fonts. That is the intent of the copyright.
+
+   8. If applications have built the names "Bitstream Vera" into them, 
+      can I override this somehow to use fonts of my choosing?
+
+      This depends on exact details of the software. Most open source
+      systems and software (e.g., Gnome, KDE, etc.) are now converting to
+      use fontconfig (see www.fontconfig.org) to handle font configuration,
+      selection and substitution; it has provisions for overriding font
+      names and subsituting alternatives. An example is provided by the
+      supplied local.conf file, which chooses the family Bitstream Vera for
+      "sans", "serif" and "monospace".  Other software (e.g., the XFree86
+      core server) has other mechanisms for font substitution.
+

modules/captcha/fonts/RELEASENOTES.TXT

@@ +1 @@
+Bitstream Vera Fonts - April 16, 2003
+=====================================
+
+The version number of these fonts is 1.10 to distinguish them from the
+beta test fonts.
+
+Note that the Vera copyright is incorporated in the fonts themselves.
+The License field in the fonts contains the copyright license as it
+appears below. The TrueType copyright field is not large enough to
+contain the full license, so the license is incorporated (as you might
+think if you thought about it) into the license field, which
+unfortunately can be obscure to find.  (In pfaedit, see: Element->Font
+Info->TTFNames->License).
+
+Our apologies for it taking longer to complete the fonts than planned.
+Beta testers requested a tighter line spacing (less leading) and Jim
+Lyles redesigned Vera's accents to bring its line spacing to more
+typical of other fonts.  This took additional time and effort.  Our
+thanks to Jim for this effort above and beyond the call of duty.
+
+There are four monospace and sans faces (normal, oblique, bold, bold
+oblique) and two serif faces (normal and bold). Fontconfig/Xft2 (see
+www.fontconfig.org) can artificially oblique the serif faces for you:
+this loses hinting and distorts the faces slightly, but is visibly
+different than normal and bold, and reasonably pleasing.
+
+On systems with fontconfig 2.0 or 2.1 installed, making your sans,
+serif and monospace fonts default to these fonts is very easy.  Just
+drop the file local.conf into your /etc/fonts directory.  This will
+make the Bitstream fonts your default fonts for all applications using
+fontconfig (if sans, serif, or monospace names are used, as they often
+are as default values in many desktops). The XML in local.conf may
+need modification to enable subpixel decimation, if appropriate,
+however, the commented out phrase does so for XFree86 4.3, in the case
+that the server does not have sufficient information to identify the
+use of a flat panel.  Fontconfig 2.2 adds Vera to the list of font
+families and will, by default use it as the default sans, serif and
+monospace fonts.
+
+During the testing of the final Vera fonts, we learned that screen
+fonts in general are only typically hinted to work correctly at
+integer pixel sizes.  Vera is coded internally for integer sizes only.
+We need to investigate further to see if there are commonly used fonts
+that are hinted to be rounded but are not rounded to integer sizes due
+to oversights in their coding.
+
+Most fonts work best at 8 pixels and below if anti-aliased only, as
+the amount of work required to hint well at smaller and smaller sizes
+becomes astronomical.  GASP tables are typically used to control
+whether hinting is used or not, but Freetype/Xft does not currently
+support GASP tables (which are present in Vera).
+
+To mitigate this problem, both for Vera and other fonts, there will be
+(very shortly) a new fontconfig 2.2 release that will, by default not
+apply hints if the size is below 8 pixels. if you should have a font
+that in fact has been hinted more agressively, you can use fontconfig
+to note this exception. We believe this should improve many hinted
+fonts in addition to Vera, though implemeting GASP support is likely
+the right long term solution.
+
+Font rendering in Gnome or KDE is the combination of algorithms in
+Xft2 and Freetype, along with hinting in the fonts themselves. It is
+vital to have sufficient information to disentangle problems that you
+may observe.
+
+Note that having your font rendering system set up correctly is vital
+to proper judgement of problems of the fonts:
+
+    * Freetype may or may not be configured to in ways that may
+      implement execution of possibly patented (in some parts of the world)
+      TrueType hinting algorithms, particularly at small sizes.  Best
+      results are obtained while using these algorithms.
+
+    * The freetype autohinter (used when the possibly patented
+      algorithms are not used) continues to improve with each release. If
+      you are using the autohinter, please ensure you are using an up to
+      date version of freetype before reporting problems.
+
+    * Please identify what version of freetype you are using in any
+      bug reports, and how your freetype is configured.
+
+    * Make sure you are not using the freetype version included in
+      XFree86 4.3, as it has bugs that significantly degrade most fonts,
+      including Vera. if you build XFree86 4.3 from source yourself, you may
+      have installed this broken version without intending it (as I
+      did). Vera was verified with the recently released Freetype 2.1.4. On
+      many systems, 'ldd" can be used to see which freetype shared library
+      is actually being used.
+
+    * Xft/X Render does not (yet) implement gamma correction.  This
+      causes significant problems rendering white text on a black background
+      (causing partial pixels to be insufficiently shaded) if the gamma of
+      your monitor has not been compensated for, and minor problems with
+      black text on a while background.  The program "xgamma" can be used to
+      set a gamma correction value in the X server's color pallette. Most
+      monitors have a gamma near 2.
+
+    * Note that the Vera family uses minimal delta hinting. Your
+      results on other systems when not used anti-aliased may not be
+      entirely satisfying. We are primarily interested in reports of
+      problems on open source systems implementing Xft2/fontconfig/freetype
+      (which implements antialiasing and hinting adjustements, and
+      sophisticated subpixel decimation on flatpanels).  Also, the
+      algorithms used by Xft2 adjust the hints to integer widths and the
+      results are crisper on open source systems than on Windows or
+      MacIntosh.
+
+    * Your fontconfig may (probably does) predate the release of
+      fontconfig 2.2, and you may see artifacts not present when the font is
+      used at very small sizes with hinting enabled. "vc-list -V" can be
+      used to see what version you have installed.
+
+We believe and hope that these fonts will resolve the problems
+reported during beta test.  The largest change is the reduction of
+leading (interline spacing), which had annoyed a number of people, and
+reduced Vera's utility for some applcations.  The Vera monospace font
+should also now make '0' and 'O' and '1' and 'l' more clearly
+distinguishable.
+
+The version of these fonts is version 1.10.  Fontconfig should be
+choosing the new version of the fonts if both the released fonts and
+beta test fonts are installed (though please discard them: they have
+names of form tt20[1-12]gn.ttf).  Note that older versions of
+fontconfig sometimes did not rebuild their cache correctly when new
+fonts are installed: please upgrade to fontconfig 2.2. "fc-cache -f"
+can be used to force rebuilding fontconfig's cache files.
+
+If you note problems, please send them to fonts at gnome dot org, with
+exactly which face and size and unicode point you observe the problem
+at. The xfd utility from XFree86 CVS may be useful for this (e.g. "xfd
+-fa sans").  A possibly more useful program to examine fonts at a
+variety of sizes is the "waterfall" program found in Keith Packard's
+CVS.
+
+        $ cvs -d :pserver:anoncvs@keithp.com:/local/src/CVS login
+        Logging in to :pserver:anoncvs@keithp.com:2401/local/src/CVS
+        CVS password: <hit return>
+        $ cvs -d :pserver:anoncvs@keithp.com:/local/src/CVS co waterfall
+        $ cd waterfall
+        $ xmkmf -a
+        $ make
+        # make install
+        # make install.man
+
+Again, please make sure you are running an up-to-date freetype, and
+that you are only examining integer sizes.
+
+Reporting Problems
+==================
+
+Please send problem reports to fonts at gnome org, with the following
+information:
+
+   1. Version of Freetype, Xft2 and fontconfig
+   2. Whether TT hinting is being used, or the autohinter
+   3. Application being used
+   4. Character/Unicode code point that has problems (if applicable)
+   5. Version of which operating system
+   6. Please include a screenshot, when possible.
+
+Please check the fonts list archives before reporting problems to cut
+down on duplication.

modules/captcha/fonts/README.TXT

@@ +1 @@
+Contained herin is the Bitstream Vera font family.
+
+The Copyright information is found in the COPYRIGHT.TXT file (along
+with being incoporated into the fonts themselves).
+
+The releases notes are found in the file "RELEASENOTES.TXT".
+
+We hope you enjoy Vera!
+
+                        Bitstream, Inc.
+                        The Gnome Project

modules/captcha/classes/CaptchaMgr.php

@@ +1 @@
+<?php
+/* Reminder: always indent with 4 spaces (no tabs). */
+// +---------------------------------------------------------------------------+
+// | Copyright (c) 2006, Demian Turner                                         |
+// | All rights reserved.                                                      |
+// |                                                                           |
+// | Redistribution and use in source and binary forms, with or without        |
+// | modification, are permitted provided that the following conditions        |
+// | are met:                                                                  |
+// |                                                                           |
+// | o Redistributions of source code must retain the above copyright          |
+// |   notice, this list of conditions and the following disclaimer.           |
+// | o Redistributions in binary form must reproduce the above copyright       |
+// |   notice, this list of conditions and the following disclaimer in the     |
+// |   documentation and/or other materials provided with the distribution.    |
+// | o The names of the authors may not be used to endorse or promote          |
+// |   products derived from this software without specific prior written      |
+// |   permission.                                                             |
+// |                                                                           |
+// | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS       |
+// | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT         |
+// | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR     |
+// | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT      |
+// | OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,     |
+// | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT          |
+// | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,     |
+// | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY     |
+// | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT       |
+// | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE     |
+// | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.      |
+// |                                                                           |
+// +---------------------------------------------------------------------------+
+// | Seagull 0.6                                                               |
+// +---------------------------------------------------------------------------+
+// | captchaMgr.php                                                    |
+// +---------------------------------------------------------------------------+
+// | Author:  <>                                  |
+// +---------------------------------------------------------------------------+
+// $Id: ManagerTemplate.html,v 1.2 2005/04/17 02:15:02 demian Exp $
+
+require_once SGL_MOD_DIR . '/captcha/classes/Captcha.php';
+
+/**
+ * General CAPTCHA solution
+ * Usage:
+ *  - In this module only the image is generated
+ *  - In other classes (that use this captcha module)
+ *      - import modules/capthca/classes/Capthca.php
+ *      - call SGL_Captcha::validateKey('typed_keyword_from_form') to validate
+ *
+ * 
+ *
+ * @package captcha
+ * @author   matti@nettirasia.com
+ * @todo add voice captcha
+ */
+class CaptchaMgr extends SGL_Manager
+{
+    function CaptchaMgr()
+    {
+        SGL::logMessage(null, PEAR_LOG_DEBUG);
+        parent::SGL_Manager();
+
+        $this->_aActionsMapping =  array(
+            'textcaptcha'      => array('textcaptcha'),
+        );
+    }
+
+    function validate($req, &$input)
+    {
+        SGL::logMessage(null, PEAR_LOG_DEBUG);
+        $this->validated    = true;
+        $input->masterTemplate = 'empty.html';
+        $input->action      = ($req->get('action')) ? $req->get('action') : 'textcaptcha';
+
+    }
+
+
+    function _cmd_textcaptcha(&$input, &$output)
+    {
+        SGL::logMessage(null, PEAR_LOG_DEBUG);
+        Captcha::printTextCaptcha();
+    }
+
+}
+?>

modules/captcha/classes/php-captcha.inc.php

@@ +1 @@
+<?php
+   /***************************************************************/
+   /* PhpCaptcha - A visual and audio CAPTCHA generation library
+   
+      Software License Agreement (BSD License)
+   
+      Copyright (C) 2005-2006, Edward Eliot.
+      All rights reserved.
+      
+      Redistribution and use in source and binary forms, with or without
+      modification, are permitted provided that the following conditions are met:
+
+         * Redistributions of source code must retain the above copyright
+           notice, this list of conditions and the following disclaimer.
+         * Redistributions in binary form must reproduce the above copyright
+           notice, this list of conditions and the following disclaimer in the
+           documentation and/or other materials provided with the distribution.
+         * Neither the name of Edward Eliot nor the names of its contributors 
+           may be used to endorse or promote products derived from this software 
+           without specific prior written permission of Edward Eliot.
+
+      THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDER AND CONTRIBUTORS "AS IS" AND ANY
+      EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+      WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+      DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY
+      DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+      (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+      LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+      ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+      (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+      SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+   
+      Last Updated:  18th April 2006                               */
+   /***************************************************************/
+   
+   /************************ Documentation ************************/
+   /*
+   
+   Documentation is available at http://www.ejeliot.com/pages/2
+   
+   */
+   /************************ Default Options **********************/
+   
+   // start a PHP session - this class uses sessions to store the generated 
+   // code. Comment out if you are calling already from your application
+   // session_start();
+   
+   // class defaults - change to effect globally
+   
+   define('CAPTCHA_SESSION_ID', 'php_captcha');
+   define('CAPTCHA_WIDTH', 200); // max 500
+   define('CAPTCHA_HEIGHT', 50); // max 200
+   define('CAPTCHA_NUM_CHARS', 5);
+   define('CAPTCHA_NUM_LINES', 70);
+   define('CAPTCHA_CHAR_SHADOW', false);
+   define('CAPTCHA_OWNER_TEXT', '');
+   define('CAPTCHA_CHAR_SET', ''); // defaults to A-Z
+   define('CAPTCHA_CASE_INSENSITIVE', true);
+   define('CAPTCHA_BACKGROUND_IMAGES', '');
+   define('CAPTCHA_MIN_FONT_SIZE', 16);
+   define('CAPTCHA_MAX_FONT_SIZE', 25);
+   define('CAPTCHA_USE_COLOUR', false);
+   define('CAPTCHA_FILE_TYPE', 'jpeg');
+   define('CAPTCHA_FLITE_PATH', '/usr/bin/flite');
+   define('CAPTCHA_AUDIO_PATH', '/tmp/'); // must be writeable by PHP process
+   
+   /************************ End Default Options **********************/
+   
+   // don't edit below this line (unless you want to change the class!)
+   
+   class PhpCaptcha {
+      var $oImage;
+      var $aFonts;
+      var $iWidth;
+      var $iHeight;
+      var $iNumChars;
+      var $iNumLines;
+      var $iSpacing;
+      var $bCharShadow;
+      var $sOwnerText;
+      var $aCharSet;
+      var $bCaseInsensitive;
+      var $vBackgroundImages;
+      var $iMinFontSize;
+      var $iMaxFontSize;
+      var $bUseColour;
+      var $sFileType;
+      var $sCode = '';
+      
+      function PhpCaptcha(
+         $aFonts, // array of TrueType fonts to use - specify full path
+         $iWidth = CAPTCHA_WIDTH, // width of image
+         $iHeight = CAPTCHA_HEIGHT // height of image
+      ) {
+         // get parameters
+         $this->aFonts = $aFonts;
+         $this->SetNumChars(CAPTCHA_NUM_CHARS);
+         $this->SetNumLines(CAPTCHA_NUM_LINES);
+         $this->DisplayShadow(CAPTCHA_CHAR_SHADOW);
+         $this->SetOwnerText(CAPTCHA_OWNER_TEXT);
+         $this->SetCharSet(CAPTCHA_CHAR_SET);
+         $this->CaseInsensitive(CAPTCHA_CASE_INSENSITIVE);
+         $this->SetBackgroundImages(CAPTCHA_BACKGROUND_IMAGES);
+         $this->SetMinFontSize(CAPTCHA_MIN_FONT_SIZE);
+         $this->SetMaxFontSize(CAPTCHA_MAX_FONT_SIZE);
+         $this->UseColour(CAPTCHA_USE_COLOUR);
+         $this->SetFileType(CAPTCHA_FILE_TYPE);   
+         $this->SetWidth($iWidth);
+         $this->SetHeight($iHeight);
+      }
+      
+      function CalculateSpacing() {
+         $this->iSpacing = (int)($this->iWidth / $this->iNumChars);
+      }
+      
+      function SetWidth($iWidth) {
+         $this->iWidth = $iWidth;
+         if ($this->iWidth > 500) $this->iWidth = 500; // to prevent perfomance impact
+         $this->CalculateSpacing();
+      }
+      
+      function SetHeight($iHeight) {
+         $this->iHeight = $iHeight;
+         if ($this->iHeight > 200) $this->iHeight = 200; // to prevent performance impact
+      }
+      
+      function SetNumChars($iNumChars) {
+         $this->iNumChars = $iNumChars;
+         $this->CalculateSpacing();
+      }
+      
+      function SetNumLines($iNumLines) {
+         $this->iNumLines = $iNumLines;
+      }
+      
+      function DisplayShadow($bCharShadow) {
+         $this->bCharShadow = $bCharShadow;
+      }
+      
+      function SetOwnerText($sOwnerText) {
+         $this->sOwnerText = $sOwnerText;
+      }
+      
+      function SetCharSet($vCharSet) {
+         // check for input type
+         if (is_array($vCharSet)) {
+            $this->aCharSet = $vCharSet;
+         } else {
+            if ($vCharSet != '') {
+               // split items on commas
+               $aCharSet = explode(',', $vCharSet);
+            
+               // initialise array
+               $this->aCharSet = array();
+            
+               // loop through items 
+               foreach ($aCharSet as $sCurrentItem) {
+                  // a range should have 3 characters, otherwise is normal character
+                  if (strlen($sCurrentItem) == 3) {
+                     // split on range character
+                     $aRange = explode('-', $sCurrentItem);
+                  
+                     // check for valid range
+                     if (count($aRange) == 2 && $aRange[0] < $aRange[1]) {
+                        // create array of characters from range
+                        $aRange = range($aRange[0], $aRange[1]);
+                     
+                        // add to charset array
+                        $this->aCharSet = array_merge($this->aCharSet, $aRange);
+                     }
+                  } else {
+                     $this->aCharSet[] = $sCurrentItem;
+                  }
+               }
+            }
+         }
+      }
+      
+      function CaseInsensitive($bCaseInsensitive) {
+         $this->bCaseInsensitive = $bCaseInsensitive;
+      }
+      
+      function SetBackgroundImages($vBackgroundImages) {
+         $this->vBackgroundImages = $vBackgroundImages;
+      }
+      
+      function SetMinFontSize($iMinFontSize) {
+         $this->iMinFontSize = $iMinFontSize;
+      }
+      
+      function SetMaxFontSize($iMaxFontSize) {
+         $this->iMaxFontSize = $iMaxFontSize;
+      }
+      
+      function UseColour($bUseColour) {
+         $this->bUseColour = $bUseColour;
+      }
+      
+      function SetFileType($sFileType) {
+         // check for valid file type
+         if (in_array($sFileType, array('gif', 'png', 'jpeg'))) {
+            $this->sFileType = $sFileType;
+         } else {
+            $this->sFileType = 'jpeg';
+         }
+      }
+      
+      function DrawLines() {
+         for ($i = 0; $i < $this->iNumLines; $i++) {
+            // allocate colour
+            if ($this->bUseColour) {
+               $iLineColour = imagecolorallocate($this->oImage, rand(100, 250), rand(100, 250), rand(100, 250));
+            } else {
+               $iRandColour = rand(100, 250);
+               $iLineColour = imagecolorallocate($this->oImage, $iRandColour, $iRandColour, $iRandColour);
+            }
+            
+            // draw line
+            imageline($this->oImage, rand(0, $this->iWidth), rand(0, $this->iHeight), rand(0, $this->iWidth), rand(0, $this->iHeight), $iLineColour);
+         }
+      }
+      
+      function DrawOwnerText() {
+         // allocate owner text colour
+         $iBlack = imagecolorallocate($this->oImage, 0, 0, 0);
+         // get height of selected font
+         $iOwnerTextHeight = imagefontheight(2);
+         // calculate overall height
+         $iLineHeight = $this->iHeight - $iOwnerTextHeight - 4;
+         
+         // draw line above text to separate from CAPTCHA
+         imageline($this->oImage, 0, $iLineHeight, $this->iWidth, $iLineHeight, $iBlack);
+         
+         // write owner text
+         imagestring($this->oImage, 2, 3, $this->iHeight - $iOwnerTextHeight - 3, $this->sOwnerText, $iBlack);
+         
+         // reduce available height for drawing CAPTCHA
+         $this->iHeight = $this->iHeight - $iOwnerTextHeight - 5;
+      }
+      
+      function GenerateCode() {
+         // reset code
+         $this->sCode = '';
+         
+         // loop through and generate the code letter by letter
+         for ($i = 0; $i < $this->iNumChars; $i++) {
+            if (count($this->aCharSet) > 0) {
+               // select random character and add to code string
+               $this->sCode .= $this->aCharSet[array_rand($this->aCharSet)];
+            } else {
+               // select random character and add to code string
+               $this->sCode .= chr(rand(65, 90));
+            }
+         }
+         
+         // save code in session variable
+         if ($this->bCaseInsensitive) {
+            $_SESSION[CAPTCHA_SESSION_ID] = strtoupper($this->sCode);
+         } else {
+            $_SESSION[CAPTCHA_SESSION_ID] = $this->sCode;
+         }
+      }
+      
+      function DrawCharacters() {
+         // loop through and write out selected number of characters
+         for ($i = 0; $i < strlen($this->sCode); $i++) {
+            // select random font
+            $sCurrentFont = $this->aFonts[array_rand($this->aFonts)];
+            
+            // select random colour
+            if ($this->bUseColour) {
+               $iTextColour = imagecolorallocate($this->oImage, rand(0, 100), rand(0, 100), rand(0, 100));
+            
+               if ($this->bCharShadow) {
+                  // shadow colour
+                  $iShadowColour = imagecolorallocate($this->oImage, rand(0, 100), rand(0, 100), rand(0, 100));
+               }
+            } else {
+               $iRandColour = rand(0, 100);
+               $iTextColour = imagecolorallocate($this->oImage, $iRandColour, $iRandColour, $iRandColour);
+            
+               if ($this->bCharShadow) {
+                  // shadow colour
+                  $iRandColour = rand(0, 100);
+                  $iShadowColour = imagecolorallocate($this->oImage, $iRandColour, $iRandColour, $iRandColour);
+               }
+            }
+            
+            // select random font size
+            $iFontSize = rand($this->iMinFontSize, $this->iMaxFontSize);
+            
+            // select random angle
+            $iAngle = rand(-30, 30);
+            
+            // get dimensions of character in selected font and text size
+            $aCharDetails = imageftbbox($iFontSize, $iAngle, $sCurrentFont, $this->sCode[$i], array());
+            
+            // calculate character starting coordinates
+            $iX = $this->iSpacing / 4 + $i * $this->iSpacing;
+            $iCharHeight = $aCharDetails[2] - $aCharDetails[5];
+            $iY = $this->iHeight / 2 + $iCharHeight / 4; 
+            
+            // write text to image
+            imagefttext($this->oImage, $iFontSize, $iAngle, $iX, $iY, $iTextColour, $sCurrentFont, $this->sCode[$i], array());
+            
+            if ($this->bCharShadow) {
+               $iOffsetAngle = rand(-30, 30);
+               
+               $iRandOffsetX = rand(-5, 5);
+               $iRandOffsetY = rand(-5, 5);
+               
+               imagefttext($this->oImage, $iFontSize, $iOffsetAngle, $iX + $iRandOffsetX, $iY + $iRandOffsetY, $iShadowColour, $sCurrentFont, $this->sCode[$i], array());
+            }
+         }
+      }
+      
+      function WriteFile($sFilename) {
+         if ($sFilename == '') {
+            // tell browser that data is jpeg
+            header("Content-type: image/$this->sFileType");
+         }
+         
+         switch ($this->sFileType) {
+            case 'gif':
+               $sFilename != '' ? imagegif($this->oImage, $sFilename) : imagegif($this->oImage);
+               break;
+            case 'png':
+               $sFilename != '' ? imagepng($this->oImage, $sFilename) : imagepng($this->oImage);
+               break;
+            default:
+               $sFilename != '' ? imagejpeg($this->oImage, $sFilename) : imagejpeg($this->oImage);
+         }
+      }
+      
+      function Create($sFilename = '') {
+         // check for required gd functions
+         if (!function_exists('imagecreate') || !function_exists("image$this->sFileType") || ($this->vBackgroundImages != '' && !function_exists('imagecreatetruecolor'))) {
+            return false;
+         }
+         
+         // get background image if specified and copy to CAPTCHA
+         if (is_array($this->vBackgroundImages) || $this->vBackgroundImages != '') {
+            // create new image
+            $this->oImage = imagecreatetruecolor($this->iWidth, $this->iHeight);
+            
+            // create background image
+            if (is_array($this->vBackgroundImages)) {
+               $iRandImage = array_rand($this->vBackgroundImages);
+               $oBackgroundImage = imagecreatefromjpeg($this->vBackgroundImages[$iRandImage]);
+            } else {
+               $oBackgroundImage = imagecreatefromjpeg($this->vBackgroundImages);
+            }
+            
+            // copy background image
+            imagecopy($this->oImage, $oBackgroundImage, 0, 0, 0, 0, $this->iWidth, $this->iHeight);
+            
+            // free memory used to create background image
+            imagedestroy($oBackgroundImage);
+         } else {
+            // create new image
+            $this->oImage = imagecreate($this->iWidth, $this->iHeight);
+         }
+         
+         // allocate white background colour
+         imagecolorallocate($this->oImage, 255, 255, 255);
+         
+         // check for owner text
+         if ($this->sOwnerText != '') {
+            $this->DrawOwnerText();
+         }
+         
+         // check for background image before drawing lines
+         if (!is_array($this->vBackgroundImages) && $this->vBackgroundImages == '') {
+            $this->DrawLines();
+         }
+         
+         $this->GenerateCode();
+         $this->DrawCharacters();
+         
+         // write out image to file or browser
+         $this->WriteFile($sFilename);
+         
+         // free memory used in creating image
+         imagedestroy($this->oImage);
+         
+         return true;
+      }
+      
+      // call this method statically
+      function Validate($sUserCode, $bCaseInsensitive = true) {
+         if ($bCaseInsensitive) {
+            $sUserCode = strtoupper($sUserCode);
+         }
+         
+         if (!empty($_SESSION[CAPTCHA_SESSION_ID]) && $sUserCode == $_SESSION[CAPTCHA_SESSION_ID]) {
+            // clear to prevent re-use
+            unset($_SESSION[CAPTCHA_SESSION_ID]);
+            
+            return true;
+         }
+         
+         return false;
+      }
+   }
+   
+   // this class will only work correctly if a visual CAPTCHA has been created first using PhpCaptcha
+   class AudioPhpCaptcha {
+      var $sFlitePath;
+      var $sAudioPath;
+      var $sCode;
+      
+      function AudioPhpCaptcha(
+         $sFlitePath = CAPTCHA_FLITE_PATH, // path to flite binary
+         $sAudioPath = CAPTCHA_AUDIO_PATH // the location to temporarily store the generated audio CAPTCHA
+      ) {
+         $this->SetFlitePath($sFlitePath);
+         $this->SetAudioPath($sAudioPath);
+         
+         // retrieve code if already set by previous instance of visual PhpCaptcha
+         if (isset($_SESSION[CAPTCHA_SESSION_ID])) {
+            $this->sCode = $_SESSION[CAPTCHA_SESSION_ID];
+         }
+      }
+      
+      function SetFlitePath($sFlitePath) {
+         $this->sFlitePath = $sFlitePath;
+      }
+      
+      function SetAudioPath($sAudioPath) {
+         $this->sAudioPath = $sAudioPath;
+      }
+      
+      function Mask($sText) {
+         $iLength = strlen($sText);
+         
+         // loop through characters in code and format
+         $sFormattedText = '';
+         for ($i = 0; $i < $iLength; $i++) {
+            // comma separate all but first and last characters
+            if ($i > 0 && $i < $iLength - 1) {
+               $sFormattedText .= ', ';
+            } elseif ($i == $iLength - 1) { // precede last character with "and"
+               $sFormattedText .= ' and ';
+            }
+            $sFormattedText .= $sText[$i];
+         }
+         
+         $aPhrases = array(
+            "The %1\$s characters are as follows: %2\$s",
+            "%2\$s, are the %1\$s letters",
+            "Here are the %1\$s characters: %2\$s",
+            "%1\$s characters are: %2\$s",
+            "%1\$s letters: %2\$s"
+         );
+         
+         $iPhrase = array_rand($aPhrases);
+         
+         return sprintf($aPhrases[$iPhrase], $iLength, $sFormattedText);
+      }
+      
+      function Create() {
+         $sText = $this->Mask($this->sCode);
+         $sFile = md5($this->sCode.time());
+         
+         // create file with flite
+         shell_exec("$this->sFlitePath -t \"$sText\" -o $this->sAudioPath$sFile.wav");
+         
+         // set headers
+         header('Content-type: audio/x-wav');
+         header("Content-Disposition: attachment;filename=$sFile.wav");
+         
+         // output to browser
+         echo file_get_contents("$this->sAudioPath$sFile.wav");
+         
+         // delete temporary file
+         @unlink("$this->sAudioPath$sFile.wav");
+      }
+   }
+   
+   // example sub class
+   class PhpCaptchaColour extends PhpCaptcha {
+      function PhpCaptchaColour($aFonts, $iWidth = CAPTCHA_WIDTH, $iHeight = CAPTCHA_HEIGHT) {
+         // call parent constructor
+         parent::PhpCaptcha($aFonts, $iWidth, $iHeight);
+         
+         // set options
+         $this->UseColour(true);
+      }
+   }
+?>

modules/captcha/classes/Captcha.php

@@ +1 @@
+<?php
+/* Reminder: always indent with 4 spaces (no tabs). */
+// +---------------------------------------------------------------------------+
+// | Copyright (c) 2006, Demian Turner                                         |
+// | All rights reserved.                                                      |
+// |                                                                           |
+// | Redistribution and use in source and binary forms, with or without        |
+// | modification, are permitted provided that the following conditions        |
+// | are met:                                                                  |
+// |                                                                           |
+// | o Redistributions of source code must retain the above copyright          |
+// |   notice, this list of conditions and the following disclaimer.           |
+// | o Redistributions in binary form must reproduce the above copyright       |
+// |   notice, this list of conditions and the following disclaimer in the     |
+// |   documentation and/or other materials provided with the distribution.    |
+// | o The names of the authors may not be used to endorse or promote          |
+// |   products derived from this software without specific prior written      |
+// |   permission.                                                             |
+// |                                                                           |
+// | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS       |
+// | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT         |
+// | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR     |
+// | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT      |
+// | OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,     |
+// | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT          |
+// | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,     |
+// | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY     |
+// | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT       |
+// | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE     |
+// | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.      |
+// |                                                                           |
+// +---------------------------------------------------------------------------+
+// | Seagull 0.6                                                               |
+// +---------------------------------------------------------------------------+
+// | Captcha.php                                                    |
+// +---------------------------------------------------------------------------+
+// | Author:  <>                                  |
+// +---------------------------------------------------------------------------+
+// $Id: ManagerTemplate.html,v 1.2 2005/04/17 02:15:02 demian Exp $
+
+require_once(SGL_MOD_DIR . '/captcha/classes/php-captcha.inc.php');
+
+/**
+ * This is an interface"" for classes and captcha generation module
+ * all (currently both) functions should be able to be called statically
+ *
+ * This first implementation uses LGPL solution: http://www.ejeliot.com/pages/2
+ *
+ * @package captcha
+ * @author   matti@nettirasia.com
+ * @todo add voice captcha
+ */
+class Captcha 
+{
+    
+    function printTextCaptcha()
+    {
+        $aFonts = array( 
+            SGL_MOD_DIR . '/captcha/fonts/VeraSeBd.ttf', 
+            SGL_MOD_DIR . '/captcha/fonts/VeraIt.ttf', 
+            SGL_MOD_DIR . '/captcha/fonts/Vera.ttf'
+        );
+        $oVisualCaptcha = new PhpCaptcha($aFonts, 200, 60);
+        $oVisualCaptcha->Create();
+    }
+
+
+    function validateKey($key)
+    {
+        return PhpCaptcha::Validate($key);
+    }
+
+
+}
+?>