|
 |
 |
 |
perl-CGI-Application-Plugin-CAPTCHA rpm build for : openSUSE Tumbleweed. For other distributions click perl-CGI-Application-Plugin-CAPTCHA.
Name : perl-CGI-Application-Plugin-CAPTCHA
| | Version : 0.04
| Vendor : obs://build_opensuse_org/devel:languages:perl
| Release : 8.44
| Date : 2022-10-14 03:04:28
| Group : Development/Libraries/Perl
| Source RPM : perl-CGI-Application-Plugin-CAPTCHA-0.04-8.44.src.rpm
| Size : 0.02 MB
| | Packager : (none)
| | Summary : Easily create, use, and verify CAPTCHAs in
| Description :
\'CGI::Application::Plugin::CAPTCHA\' allows programmers to easily add and verify CAPTCHAs in their CGI::Application-derived web applications.
A CAPTCHA (or Completely Automated Public Turing Test to Tell Computers and Humans Apart) is an image with a random string of characters. A user must successfully enter the random string in order to submit a form. This is a simple (yet annoying) procedure for humans to complete, but one that is significantly more difficult for a form-stuffing script to complete without having to integrate some sort of OCR.
CAPTCHAs are not a perfect solution. Any skilled, diligent cracker will eventually be able to bypass a CAPTCHA, but it should be able to shut down your average script-kiddie.
\'CGI::Application::Plugin::CAPTCHA\' is a wrapper for GD::SecurityImage. It makes it more convenient to access GD::SecurityImage functionality, and gives a more CGI::Application-like way of doing it.
When a CAPTCHA is created with this module, raw image data is transmitted from your web application to the client browser. A cookie containing a checksum is also transmitted with the image. When the client submits their form for processing (along with their verification of the random string), \'captcha_verify()\' generates a checksum of the verification string the user entered. If the newly generated checksum matches the checksum found in the cookie, we trust that the CAPTCHA has been successfully entered, and we allow the user to continue processing their form.
The checksum is generated by taking the string in question, and joining it with a SECRET. We then generate an SHA1 hex digest of the resulting string. The end user will not be able to generate their own checksums to bypass the CAPTCHA check, because they do not know the value of our SECRET. This means it is important to choose a good value for your SECRET.
An easy way to generate a relatively good secret is to run the following perl snippet:
perl -MDigest::SHA1=sha1_base64 -le \'print sha1_base64($$,time(),rand(9999))\'
The author recognizes that the transmission of a cookie with the CAPTCHA image may not be a popular decision, and welcomes any patches from those who can provide an equally easy-to-implement solution.
| RPM found in directory: /packages/linux-pbone/ftp5.gwdg.de/pub/opensuse/repositories/devel:/languages:/perl:/CPAN-C/openSUSE_Tumbleweed/noarch |
Content of RPM
Provides
Requires
Provides : perl(CGI::Application::Plugin::CAPTCHA) perl-CGI-Application-Plugin-CAPTCHA
Requires :
Content of RPM : /usr/lib/perl5/vendor_perl/5.36.0/CGI
/usr/lib/perl5/vendor_perl/5.36.0/CGI/Application
/usr/lib/perl5/vendor_perl/5.36.0/CGI/Application/Plugin
/usr/lib/perl5/vendor_perl/5.36.0/CGI/Application/Plugin/CAPTCHA.pm
/usr/share/doc/packages/perl-CGI-Application-Plugin-CAPTCHA
/usr/share/doc/packages/perl-CGI-Application-Plugin-CAPTCHA/Changes
/usr/share/doc/packages/perl-CGI-Application-Plugin-CAPTCHA/README
/usr/share/man/man3/CGI::Application::Plugin::CAPTCHA.3pm.gz
|
|
|