Hi. :)

On Thu, Nov 17, 2005 at 06:09:28PM +0900, Atsushi Shibata wrote:
> You can randomize CAPTCHA codes , preparing set of CAPTCHA image and 
> hidden field or SESSION.

You *really* don't want to initialize session without any purpose until you're
not logged in. Moreover, it is possible to exploit you with a script, which 
will 
learn all your prepared images and will fill up your blog with a fortune's
comments.

> PIL is a "external" module, requires building binary codes.
> I think all the COREBlog1 features sould work without any external 
> module.

Right. Therefore you *really* want to implement captcha feature in the CB.
The code would be (idea-only):


try:
    import PIL.Image
    CAPTCHA_ENABLE = 1
except ImportError:
    CAPTCHA_ENABLE = None



class COREBlog:

    ...

    def captchaEnable(self, **kw):
        """
        Return boolean of captcha feature availability.
        """

        return CAPTCHA_ENABLE


Then in DTML:

    <dtml-if captchaEnable>
      Use captcha feature: <input type="checkbox" name="use_captcha">
    <dtml-else>
      You need <a href="http://www.pythonware.com/";>Python Image Library</a> 
      installed for captcha feature.
    </dtml-if>


> If you need some additional feature, you can do by your hand.
> Write How to, then you will become a hero !
> That's open source way, I think ;-).

I can implement it as a patch to CB and send it to you. No hero status is
needed. However, as much as I remember, you never answer my mails with 
suggestions about CB. :-)

> Please, no flames about my bad English (sorry!).

Anata no eigo wa kawai desu ne! :)

-- 
暮

Mosher's Law of Software Engineering:
        Don't worry if it doesn't work right.
        If everything did, you'd be out of a job.
_______________________________________________
COREblog-en mailing list
[email protected]
http://postaria.com/cgi-bin/mailman/listinfo/coreblog-en
Unsubscription writing to [EMAIL PROTECTED]

Reply via email to