【向暴力群发(搜客,利剑)说不For Disciz 5.0 GBK!】2007/01/03更新

gqg7902 · 发表于 2006-11-29 13:22:15

那位老大把删除好的给我发一份怎么样？估计我的是没删完，对代码不了解，所以没办法了。我邮箱lxshd@126.com，谢谢了。

gqg7902 · 发表于 2006-11-29 16:22:03

<?php
$secnum['num_list'] = "1~1,2~2,3~3,4~4,5~5,6~6,7~7,8~8,9~9,10~10";
$secnum['hashname'] = 'kengni';
$secnum['fieldname_useranswer'] = "$mcspvalue";
$secnum['fieldname_mathresult'] = "$mcspinfo";
function math_comment_spam_protection() {
global $secnum;
$num_array = mcsp_aux_numbers_to_array($secnum['num_list']);
$rand_keys = array_rand($num_array, 2);
$mcsp_info['operand1'] = $num_array[$rand_keys[0]];
$mcsp_info['operand2'] = $num_array[$rand_keys[1]];
$result = $rand_keys[0] + $rand_keys[1];
$mcsp_info['result'] = mcsp_aux_generate_hash($result, date(j));
return $mcsp_info;
}
function mcsp_check_input($answer,$result) {
global $secnum;
$value_result = $result;
$value_entered = preg_replace('/[^0-9]/','',$answer);
if ($value_entered == '') {
$checkresult='no_answer';
} elseif ( $value_result != mcsp_aux_generate_hash($value_entered, date(j)) ) {
if ( ( date('G') <= 1 ) AND ( $value_result == mcsp_aux_generate_hash($value_entered, (intval(date(j))-1) ) ) ) {
} else {
$checkresult='wrong_answer';
}
}
return $checkresult;
}
function mcsp_aux_generate_hash($inputstring, $day) {
global $secnum;
$inputstring .= getenv('REMOTE_ADDR');
$inputstring .= $secnum['hashname'];
$inputstring .= $day . date('ny');
$enc = strrev(md5($inputstring));
$enc = substr($enc, 26, 1) . substr($enc, 10, 1) . substr($enc, 23, 1) . substr($enc, 3, 1) . substr($enc, 19, 1);
return $enc;
}
function mcsp_aux_numbers_to_array($input) {
$input = str_replace(' ', '', $input);
$sourcearray = explode(',', $input);
foreach ($sourcearray as $loopval) {
$temparr = explode('~', $loopval);
$targetarray[$temparr[0]] = $temparr[1];
}
return $targetarray;
}
function mcsp_aux_fieldname_formatting($input) {
$return = preg_replace('/[^a-zA-Z0-9_\-]/', '', $input);
return $return;
}
?>

复制代码

这是我删除注释后的代码，那位帮看一下那里删错了

xuesharp · 发表于 2006-11-29 17:49:05

这个我就不太清楚了，我碰到一个有类似情况的，只要把注释删除，就OK了～～～！

gqg7902 · 发表于 2006-11-29 17:52:21

能不能把你删除注释的代码发一份？我可能给删除的多了，对有些代码不认识。

xuesharp · 发表于 2006-11-29 18:16:24

这个就是删除注释后的了～～！

<?php
$secnum['num_list'] = "1~1,2~2,3~3,4~4,5~5,6~6,7~7,8~8,9~9,10~10";
$secnum['hashname'] = 'kengni';
$secnum['fieldname_useranswer'] = "$mcspvalue";
$secnum['fieldname_mathresult'] = "$mcspinfo";
function math_comment_spam_protection() {
global $secnum;
// Get numbers in array
$num_array = mcsp_aux_numbers_to_array($secnum['num_list']);
// Get random keys
$rand_keys = array_rand($num_array, 2);
// Operands for displaying...
$mcsp_info['operand1'] = $num_array[$rand_keys[0]];
$mcsp_info['operand2'] = $num_array[$rand_keys[1]];
// Calculate result
$result = $rand_keys[0] + $rand_keys[1];
$mcsp_info['result'] = mcsp_aux_generate_hash($result, date(j));
return $mcsp_info;
}
function mcsp_check_input($answer,$result) {
global $secnum;
// Get result
$value_result = $result;
// Get value user has entered
$value_entered = preg_replace('/[^0-9]/','',$answer); // Remove everything except numbers
if ($value_entered == '') {
// Case 1: User has not entered an answer at all:
$checkresult='no_answer';
} elseif ( $value_result != mcsp_aux_generate_hash($value_entered, date(j)) ) {
if ( ( date('G') <= 1 ) AND ( $value_result == mcsp_aux_generate_hash($value_entered, (intval(date(j))-1) ) ) ) {
// User has just passed midnight while writing the comment. We consider
// the time between 0:00 and 1:59 still as the day before to avoid
// error messages if user visited page on 23:50 but pressed the "Submit Comment"
// button on 0:15.
} else {
// Case 2: User has entered a wrong answer:
$checkresult='wrong_answer';
}
}
return $checkresult;
}
function mcsp_aux_generate_hash($inputstring, $day) {
global $secnum;
// Add IP address:
// [ not use for now... if users using dial-up connections, disconnect when writing
// the comment and re-connect again, they will get a new IP address. ]
// $inputstring .= getenv('REMOTE_ADDR');
// Add name of the weblog:
$inputstring .= $secnum['hashname'];
// Add date:
$inputstring .= $day . date('ny');
// Get MD5 and reverse it
$enc = strrev(md5($inputstring));
// Get only a few chars out of the string
$enc = substr($enc, 26, 1) . substr($enc, 10, 1) . substr($enc, 23, 1) . substr($enc, 3, 1) . substr($enc, 19, 1);
// Return result
return $enc;
}
function mcsp_aux_numbers_to_array($input) {
// Converts the input string, e.g. "1~one, 2~two, 3~three, 4~four, ..."
// into an array, e.g.: Array([1] => one, [2] => two, [3] => three, ...)
$input = str_replace(' ', '', $input); // Strip whitespace
$sourcearray = explode(',', $input); // Create array
foreach ($sourcearray as $loopval) {
$temparr = explode('~', $loopval);
$targetarray[$temparr[0]] = $temparr[1];
}
return $targetarray;
}
function mcsp_aux_fieldname_formatting($input) {
// Clean the input values for the field names...
$return = preg_replace('/[^a-zA-Z0-9_\-]/', '', $input);
return $return;
}
?>

复制代码

gqg7902 · 发表于 2006-11-29 18:23:21

非常感谢，我试一下。

gqg7902 · 发表于 2006-11-29 21:24:55

非常感谢搂住，终于安装成功了，按照你删除注释后的上传的，看来我删除的注释删除的太多了。

dawiye · 发表于 2006-12-1 21:33:30

我按你的方法修改后注册页面显示空白，请楼主教下我。谢谢

ywxs · 发表于 2006-12-3 22:44:08

这帖子怎么跑这里来了？？？

chen1mao · 发表于 2006-12-6 16:09:13

注册页的提示有点往上了。改为

<tr>
<td class="altbg1"><span class="bold">防止暴力注册</span></td>
<td class="altbg2"><div class="input"><input type="text" name="mcspvalue" size="25" maxlength="15" id="mcspvalue"></div>
<div id="mcsp" class="notice">  <span class="smalltxt">请计算一个简单的加法 $mcsp_info[operand1] + $mcsp_info[operand2] ,将结果填写至左边.</span></div>
<input type="hidden" name="mcspinfo" value="$mcsp_info['result']">
</td>
</tr>

复制代码

能好看一点～

		自动登录	找回密码
密码			立即注册