Using Google's reCapatcha in phpBB

Do not post support requests, bug reports or feature requests. Discuss phpBB here. Non-phpBB related discussion goes in General Discussion!
Scam Warning
Post Reply
User avatar
Ancient Viking
Registered User
Posts: 591
Joined: Sun Jan 15, 2012 11:43 pm

Using Google's reCapatcha in phpBB

Post by Ancient Viking »

Earlier this year Nexus implemented Google's reCapatcha, just to prevent bots from getting access to peoples account on Nexus.

It looks like this picture and I have been thinking about setting up Google's reCapatcha on my own site too.

Has the phpBB team talked about it or is it too new?
My local forum: egetforum.nu - Offline Forum Online!
User avatar
Brf
Support Team Member
Support Team Member
Posts: 53400
Joined: Tue May 10, 2005 7:47 pm
Location: {postrow.POSTER_FROM}
Contact:

Re: Using Google's reCapatcha in phpBB

Post by Brf »

Recaptcha has been available in phpBB’s registration for years now.
User avatar
bonelifer
Community Team Member
Community Team Member
Posts: 3542
Joined: Wed Oct 27, 2004 11:35 pm
Name: William
Contact:

Re: Using Google's reCapatcha in phpBB

Post by bonelifer »

The "I'm a Person" version is in 3.2. The new Invisible version would probably have to wait till 3.3. Someone could however create an extension to add to add it.
William Jacoby - Community Team
Knowledge Base | phpBB Board Rules | Search Customisation Database
Please don't contact me via PM or email for phpBB support .
User avatar
stevemaury
Support Team Member
Support Team Member
Posts: 52768
Joined: Thu Nov 02, 2006 12:21 am
Location: The U.P.
Name: Steve
Contact:

Re: Using Google's reCapatcha in phpBB

Post by stevemaury »

Ancient Viking wrote: Wed Sep 05, 2018 12:23 am Earlier this year Nexus implemented Google's reCapatcha, just to prevent bots from getting access to peoples account on Nexus.
How would a CAPTCHA have anything to do with accessing a particular account? The password would still be needed.
I can stop all your spam. I can upgrade or update your Board. PM or email me. (Paid support)
User avatar
Ancient Viking
Registered User
Posts: 591
Joined: Sun Jan 15, 2012 11:43 pm

Re: Using Google's reCapatcha in phpBB

Post by Ancient Viking »

stevemaury wrote: Wed Sep 05, 2018 1:51 pm
Ancient Viking wrote: Wed Sep 05, 2018 12:23 am Earlier this year Nexus implemented Google's reCapatcha, just to prevent bots from getting access to peoples account on Nexus.
How would a CAPTCHA have anything to do with accessing a particular account? The password would still be needed.
This is the reason why Dark0ne, the owner of Nexus, decided to use reCapatcha on Nexus.
My local forum: egetforum.nu - Offline Forum Online!
User avatar
Dog Cow
Registered User
Posts: 2507
Joined: Fri Jan 28, 2005 12:14 am
Contact:

Re: Using Google's reCapatcha in phpBB

Post by Dog Cow »

stevemaury wrote: Wed Sep 05, 2018 1:51 pm
Ancient Viking wrote: Wed Sep 05, 2018 12:23 am Earlier this year Nexus implemented Google's reCapatcha, just to prevent bots from getting access to peoples account on Nexus.
How would a CAPTCHA have anything to do with accessing a particular account? The password would still be needed.
The same reason that a CAPTCHA has anything to do with registering a new account.
User avatar
stevemaury
Support Team Member
Support Team Member
Posts: 52768
Joined: Thu Nov 02, 2006 12:21 am
Location: The U.P.
Name: Steve
Contact:

Re: Using Google's reCapatcha in phpBB

Post by stevemaury »

No CAPTCHA prevents getting access to accounts. It may make logging on with that access more difficult. The post linked by Ancient Viking explains that the CAPTCHA was implemented AFTER the accounts were breached to make their use more difficult.
I can stop all your spam. I can upgrade or update your Board. PM or email me. (Paid support)
User avatar
Ger
Registered User
Posts: 2108
Joined: Wed Jan 02, 2008 7:35 pm
Location: 192.168.1.100
Contact:

Re: Using Google's reCapatcha in phpBB

Post by Ger »

That forum runs on an old version of IPB; 3.x if I'm not mistaken. They had a serious flaw storing their passwords as

Code: Select all

md5( md5($hash) . md5($password) );
So I wouldn't be surprised if those passwords were compromised. Once some hacker has a list of passwords he can try to login using a script. That script will fail if suddenly a captcha is required.

In the end the captcha doesn't do anything at all to prevent breaching the accounts.
My extensions:
Simple CMS, Feed post bot, Avatar Resize, Modbreak, Magic OGP, Live topic update, Modern Quote, Quoted Where (GDPR) and Autoresponder.
Newest: FAQ manager for 3.2

Like my work? Buy me a coffee to keep it coming. :ugeek:

-Don't PM me for support-
Louis235
Registered User
Posts: 1
Joined: Sat Oct 13, 2018 4:33 am

Re: Using Google's reCapatcha in phpBB

Post by Louis235 »

I have not seen any problems with "spam" registrations since I moved over to Google reCaptcha.
User avatar
Lumpy Burgertushie
Registered User
Posts: 69223
Joined: Mon May 02, 2005 3:11 am
Contact:

Re: Using Google's reCapatcha in phpBB

Post by Lumpy Burgertushie »

not the point. the captcha is used when registering. that is not the same thing as accessing an account that is already in place.

once you have registered there is no need for a captcha during login.


robert
Premium phpBB 3.3 Styles by PlanetStyles.net

I am pleased to announce that I have completed the first item on my bucket list. I have the bucket.
User avatar
Ancient Viking
Registered User
Posts: 591
Joined: Sun Jan 15, 2012 11:43 pm

Re: Using Google's reCapatcha in phpBB

Post by Ancient Viking »

Louis235 wrote: Tue Oct 16, 2018 6:47 am I have not seen any problems with "spam" registrations since I moved over to Google reCaptcha.
I would like to know how to use Google's reCaptcha on my site and if it matters I already have https:// in place.

What do I need to do?
My local forum: egetforum.nu - Offline Forum Online!
User avatar
Mick
Support Team Member
Support Team Member
Posts: 26505
Joined: Fri Aug 29, 2008 9:49 am

Re: Using Google's reCapatcha in phpBB

Post by Mick »

In order to use reCaptcha, you must create an account on www.google.com/recaptcha. Then go to spambot countermeasures, select reCaptcha, configure and fill in the blanks.
  • "The more connected we get the more alone we become" - Kyle Broflovski©
  • "The good news is hell is just the product of a morbid human imagination.
    The bad news is, whatever humans can imagine, they can usually create.
    " - Harmony Cobel
Swanny
Registered User
Posts: 486
Joined: Sun Apr 14, 2002 2:11 am
Location: Canada

Re: Using Google's reCapatcha in phpBB

Post by Swanny »

Does phpBB plan on supporting reCaptcha v3? Details @ https://developers.google.com/recaptcha/docs/v3
sakm
Registered User
Posts: 713
Joined: Sun Jan 21, 2007 8:14 pm
Location: Hull, uk
Name: Stu
Contact:

Re: Using Google's reCapatcha in phpBB

Post by sakm »

I thought reCapatcha had been broken by bots already?
User avatar
Mick
Support Team Member
Support Team Member
Posts: 26505
Joined: Fri Aug 29, 2008 9:49 am

Re: Using Google's reCapatcha in phpBB

Post by Mick »

It has been compromised a few times, the last time was in May I believe and a patch was issued. There are many discussions about it's *past* vulnerabilities on the web.
  • "The more connected we get the more alone we become" - Kyle Broflovski©
  • "The good news is hell is just the product of a morbid human imagination.
    The bad news is, whatever humans can imagine, they can usually create.
    " - Harmony Cobel
Post Reply

Return to “phpBB Discussion”