Thread: [Cppcms-users] google recaptcha
Brought to you by:
artyom-beilis
|
From: Shiv S. D. <shi...@gm...> - 2013-11-28 12:37:33
|
Hi, Since CppCMSs form widget does not have recaptcha field how can one enable google recaptcha for something like registration page or after certain failed login attempts. I see that CppBlog has some recaptcha code which generated recaptcha images. Is it good enough to be used in production code or should it be improved. I mean security-wise. -- Respect, Shiv Shankar Dayal |
|
From: Artyom B. <art...@ya...> - 2013-11-28 12:48:49
|
The CppBlog has my own captcha, For the recaptcha the answer is simple: https://svn.code.sf.net/p/cppcms/code/framework/trunk/contrib/server_side/recaptcha/ It is already there under contrib section although in trunk but the code works with stable CppCMS as well. This recaptcha code is used in production environment. You need libcurl to compile it. Artyom Beilis -------------- CppCMS - C++ Web Framework: http://cppcms.com/ CppDB - C++ SQL Connectivity: http://cppcms.com/sql/cppdb/ -------------------------------------------- On Thu, 11/28/13, Shiv Shankar Dayal <shi...@gm...> wrote: Subject: [Cppcms-users] google recaptcha To: cpp...@li... Date: Thursday, November 28, 2013, 2:37 PM Hi, Since CppCMSs form widget does not have recaptcha field how can one enable google recaptcha for something like registration page or after certain failed login attempts. I see that CppBlog has some recaptcha code which generated recaptcha images. Is it good enough to be used in production code or should it be improved. I mean security-wise. -- Respect, Shiv Shankar Dayal -----Inline Attachment Follows----- ------------------------------------------------------------------------------ Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk -----Inline Attachment Follows----- _______________________________________________ Cppcms-users mailing list Cpp...@li... https://lists.sourceforge.net/lists/listinfo/cppcms-users |
|
From: Shiv S. D. <shi...@gm...> - 2013-11-28 13:01:19
|
Thanks. The contrib has some more interesting and useful code. I will read the code and one thing which I think I will extend is session storage for Couchbase database. On Thu, Nov 28, 2013 at 6:18 PM, Artyom Beilis <art...@ya...> wrote: > The CppBlog has my own captcha, > > For the recaptcha the answer is simple: > > > https://svn.code.sf.net/p/cppcms/code/framework/trunk/contrib/server_side/recaptcha/ > > It is already there under contrib section although in trunk but the code > works with stable CppCMS as well. This recaptcha code is used in production > environment. You need libcurl to compile it. > > Artyom Beilis > > -------------- > > CppCMS - C++ Web Framework: http://cppcms.com/ > > CppDB - C++ SQL Connectivity: http://cppcms.com/sql/cppdb/ > > -------------------------------------------- > On Thu, 11/28/13, Shiv Shankar Dayal <shi...@gm...> wrote: > > Subject: [Cppcms-users] google recaptcha > To: cpp...@li... > Date: Thursday, November 28, 2013, 2:37 PM > > Hi, > > Since CppCMSs form widget does not have recaptcha > field how can one enable google recaptcha for something like > registration page or after certain failed login attempts. > > > I see that CppBlog has some recaptcha code which generated > recaptcha images. Is it good enough to be used in production > code or should it be improved. I mean security-wise. > > -- > > Respect, > Shiv Shankar Dayal > > > -----Inline Attachment Follows----- > > > ------------------------------------------------------------------------------ > Rapidly troubleshoot problems before they affect your > business. Most IT > organizations don't have a clear picture of how application > performance > affects their revenue. With AppDynamics, you get 100% > visibility into your > Java,.NET, & PHP application. Start your 15-day FREE > TRIAL of AppDynamics Pro! > > http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk > -----Inline Attachment Follows----- > > _______________________________________________ > Cppcms-users mailing list > Cpp...@li... > https://lists.sourceforge.net/lists/listinfo/cppcms-users > > > > ------------------------------------------------------------------------------ > Rapidly troubleshoot problems before they affect your business. Most IT > organizations don't have a clear picture of how application performance > affects their revenue. With AppDynamics, you get 100% visibility into your > Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics > Pro! > http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk > _______________________________________________ > Cppcms-users mailing list > Cpp...@li... > https://lists.sourceforge.net/lists/listinfo/cppcms-users > -- Respect, Shiv Shankar Dayal |
|
From: CN <cn...@fa...> - 2013-11-29 11:30:03
|
Taking void post(std::string const &author,std::string const &message)
in file json_rpc_chat.cpp as an example,
session().is_set("my_key");
appears to always return false. However,
session().get_session_cookie();
does return a string. Am I misunderstanding http or the framework?
Thank you!
CN
--
http://www.fastmail.fm - Choose from over 50 domains or use your own
|
|
From: Shiv S. D. <shi...@gm...> - 2013-11-29 11:48:50
|
If you want to retrieve session().is_set("my_key") which appears to be your
key
then before retrieving you need to set it as shown in
http://cppcms.com/wikipp/en/page/cppcms_1x_sessions
For example,
session().set("my_key", true);
before it will return true.
On Fri, Nov 29, 2013 at 4:59 PM, CN <cn...@fa...> wrote:
> Taking void post(std::string const &author,std::string const &message)
> in file json_rpc_chat.cpp as an example,
>
> session().is_set("my_key");
>
> appears to always return false. However,
>
> session().get_session_cookie();
>
> does return a string. Am I misunderstanding http or the framework?
>
> Thank you!
> CN
>
> -- http://www.fastmail.fm - Choose from over 50 domains or use your own
>
>
>
> ------------------------------------------------------------------------------
> Rapidly troubleshoot problems before they affect your business. Most IT
> organizations don't have a clear picture of how application performance
> affects their revenue. With AppDynamics, you get 100% visibility into your
> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics
> Pro!
> http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
> _______________________________________________
> Cppcms-users mailing list
> Cpp...@li...
> https://lists.sourceforge.net/lists/listinfo/cppcms-users
>
>
--
Respect,
Shiv Shankar Dayal
|
|
From: CN <cn...@fa...> - 2013-11-29 12:15:25
|
Aha! I already had read [1]http://cppcms.com/wikipp/en/page/cppcms_1x_sessions before I posted my question. After re-reading it, I finally notice that cppcms::session_interface::load() must be called every time after the request arrives in asynchronous applications. session().set("my_key") is automatically called by the framework if client side cookie named "my_key" is set. This means we do not need to manually call session().set("my_key") if that cookie is already set. Please correct me if I misunderstand it! Regards, CN On Fri, Nov 29, 2013, at 07:48 PM, Shiv Shankar Dayal wrote: If you want to retrieve session().is_set("my_key") which appears to be your key then before retrieving you need to set it as shown in [2]http://cppcms.com/wikipp/en/page/cppcms_1x_sessions For example, session().set("my_key", true); before it will return true. On Fri, Nov 29, 2013 at 4:59 PM, CN <[3]cn...@fa...> wrote: Taking void post(std::string const &author,std::string const &message) in file json_rpc_chat.cpp as an example, session().is_set("my_key"); appears to always return false. However, session().get_session_cookie(); does return a string. Am I misunderstanding http or the framework? Thank you! CN -- [4]http://www.fastmail.fm - Choose from over 50 domains or use your own ----------------------------------------------------------------------- ------- Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! [5]http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg .clktrk _______________________________________________ Cppcms-users mailing list [6]Cpp...@li... [7]https://lists.sourceforge.net/lists/listinfo/cppcms-users -- Respect, Shiv Shankar Dayal ----------------------------------------------------------------------- ------- Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! [8]http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg .clktrk _______________________________________________ Cppcms-users mailing list [9]Cpp...@li... [10]https://lists.sourceforge.net/lists/listinfo/cppcms-users References 1. http://cppcms.com/wikipp/en/page/cppcms_1x_sessions 2. http://cppcms.com/wikipp/en/page/cppcms_1x_sessions 3. mailto:cn...@fa... 4. http://www.fastmail.fm/ 5. http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk 6. mailto:Cpp...@li... 7. https://lists.sourceforge.net/lists/listinfo/cppcms-users 8. http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk 9. mailto:Cpp...@li... 10. https://lists.sourceforge.net/lists/listinfo/cppcms-users -- http://www.fastmail.fm - A no graphics, no pop-ups email service |
|
From: Shiv S. D. <shi...@gm...> - 2013-11-29 13:00:27
|
But to set a client-side cookie you set it from server side. That is server stores session data in client in the form of cookie. Another thing which can happen is you use client side cookies using something like jQuery Cookie but that is a different question. I see in the sessions example that when form data is received it sets name, sex, state and age. I have not yet studied how things work in asynchronous applications. My knowledge is limited in this regard so I would rather wait for some expert to comment. On Fri, Nov 29, 2013 at 5:45 PM, CN <cn...@fa...> wrote: > Aha! > > I already had read http://cppcms.com/wikipp/en/page/cppcms_1x_sessionsbefore I posted my question. After re-reading it, I finally notice that > > cppcms::session_interface::load() > > must be called every time after the request arrives in asynchronous > applications. > > session().set("my_key") is automatically called by the framework if client > side cookie named "my_key" is set. This means we do not need to manually > call session().set("my_key") if that cookie is already set. Please correct > me if I misunderstand it! > > Regards, > CN > > On Fri, Nov 29, 2013, at 07:48 PM, Shiv Shankar Dayal wrote: > > If you want to retrieve session().is_set("my_key") which appears to be > your key > then before retrieving you need to set it as shown in > http://cppcms.com/wikipp/en/page/cppcms_1x_sessions > For example, > > session().set("my_key", true); > > before it will return true. > > > On Fri, Nov 29, 2013 at 4:59 PM, CN <cn...@fa...> wrote: > > Taking void post(std::string const &author,std::string const &message) > in file json_rpc_chat.cpp as an example, > > session().is_set("my_key"); > > appears to always return false. However, > > session().get_session_cookie(); > > does return a string. Am I misunderstanding http or the framework? > > Thank you! > CN > > -- http://www.fastmail.fm - Choose from over 50 domains or use your own > > > ------------------------------------------------------------------------------ > Rapidly troubleshoot problems before they affect your business. Most IT > organizations don't have a clear picture of how application performance > affects their revenue. With AppDynamics, you get 100% visibility into your > Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics > Pro! > > http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk > _______________________________________________ > Cppcms-users mailing list > Cpp...@li... > https://lists.sourceforge.net/lists/listinfo/cppcms-users > > > > > -- > Respect, > Shiv Shankar Dayal > > ------------------------------------------------------------------------------ > Rapidly troubleshoot problems before they affect your business. Most IT > organizations don't have a clear picture of how application performance > affects their revenue. With AppDynamics, you get 100% visibility into your > Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics > Pro! > http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk > *_______________________________________________* > Cppcms-users mailing list > Cpp...@li... > https://lists.sourceforge.net/lists/listinfo/cppcms-users > > -- http://www.fastmail.fm - A no graphics, no pop-ups email service > > > > ------------------------------------------------------------------------------ > Rapidly troubleshoot problems before they affect your business. Most IT > organizations don't have a clear picture of how application performance > affects their revenue. With AppDynamics, you get 100% visibility into your > Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics > Pro! > http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk > _______________________________________________ > Cppcms-users mailing list > Cpp...@li... > https://lists.sourceforge.net/lists/listinfo/cppcms-users > > -- Respect, Shiv Shankar Dayal |
|
From: Eric G. <con...@gm...> - 2013-11-30 21:54:43
|
Maybe I'm wrong...
But...
What I understand about sessions, is that... the cookie is the serial
number of the session... not the content of "my_key". Your key belongs to
the session..
So..
the session can exist (get_cookie return something) but the key inside the
session may not exist at the same time of course (is_set(my_key) return
false).
On Fri, Nov 29, 2013 at 6:29 AM, CN <cn...@fa...> wrote:
> Taking void post(std::string const &author,std::string const &message)
> in file json_rpc_chat.cpp as an example,
>
> session().is_set("my_key");
>
> appears to always return false. However,
>
> session().get_session_cookie();
>
> does return a string. Am I misunderstanding http or the framework?
>
> Thank you!
> CN
>
> -- http://www.fastmail.fm - Choose from over 50 domains or use your own
>
>
>
> ------------------------------------------------------------------------------
> Rapidly troubleshoot problems before they affect your business. Most IT
> organizations don't have a clear picture of how application performance
> affects their revenue. With AppDynamics, you get 100% visibility into your
> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics
> Pro!
> http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
> _______________________________________________
> Cppcms-users mailing list
> Cpp...@li...
> https://lists.sourceforge.net/lists/listinfo/cppcms-users
>
>
|
|
From: Shiv S. D. <shi...@gm...> - 2013-11-30 23:37:01
|
Even though cookies are stored in browser they are sent by servers or
servers have to send cookies to browser to be stored and hence you can
always set that. CppCMS recommends session data in cookies or you can store
it server side also.
On Sun, Dec 1, 2013 at 3:24 AM, Eric Gendron <con...@gm...> wrote:
> Maybe I'm wrong...
> But...
> What I understand about sessions, is that... the cookie is the serial
> number of the session... not the content of "my_key". Your key belongs to
> the session..
>
> So..
>
> the session can exist (get_cookie return something) but the key inside the
> session may not exist at the same time of course (is_set(my_key) return
> false).
>
>
>
>
> On Fri, Nov 29, 2013 at 6:29 AM, CN <cn...@fa...> wrote:
>
>> Taking void post(std::string const &author,std::string const &message)
>> in file json_rpc_chat.cpp as an example,
>>
>> session().is_set("my_key");
>>
>> appears to always return false. However,
>>
>> session().get_session_cookie();
>>
>> does return a string. Am I misunderstanding http or the framework?
>>
>> Thank you!
>> CN
>>
>> -- http://www.fastmail.fm - Choose from over 50 domains or use your own
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Rapidly troubleshoot problems before they affect your business. Most IT
>> organizations don't have a clear picture of how application performance
>> affects their revenue. With AppDynamics, you get 100% visibility into your
>> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics
>> Pro!
>>
>> http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
>> _______________________________________________
>> Cppcms-users mailing list
>> Cpp...@li...
>> https://lists.sourceforge.net/lists/listinfo/cppcms-users
>>
>>
>
>
> ------------------------------------------------------------------------------
> Rapidly troubleshoot problems before they affect your business. Most IT
> organizations don't have a clear picture of how application performance
> affects their revenue. With AppDynamics, you get 100% visibility into your
> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics
> Pro!
> http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
> _______________________________________________
> Cppcms-users mailing list
> Cpp...@li...
> https://lists.sourceforge.net/lists/listinfo/cppcms-users
>
>
--
Respect,
Shiv Shankar Dayal
|
|
From: Eric G. <con...@gm...> - 2013-12-01 00:04:36
|
Even if data can also be stored in cookie, a specifiq key/value pair may
not exist...
That was the point.
Le 2013-11-30 18:37, "Shiv Shankar Dayal" <shi...@gm...> a
écrit :
> Even though cookies are stored in browser they are sent by servers or
> servers have to send cookies to browser to be stored and hence you can
> always set that. CppCMS recommends session data in cookies or you can store
> it server side also.
>
>
> On Sun, Dec 1, 2013 at 3:24 AM, Eric Gendron <con...@gm...> wrote:
>
>> Maybe I'm wrong...
>> But...
>> What I understand about sessions, is that... the cookie is the serial
>> number of the session... not the content of "my_key". Your key belongs to
>> the session..
>>
>> So..
>>
>> the session can exist (get_cookie return something) but the key inside
>> the session may not exist at the same time of course (is_set(my_key) return
>> false).
>>
>>
>>
>>
>> On Fri, Nov 29, 2013 at 6:29 AM, CN <cn...@fa...> wrote:
>>
>>> Taking void post(std::string const &author,std::string const &message)
>>> in file json_rpc_chat.cpp as an example,
>>>
>>> session().is_set("my_key");
>>>
>>> appears to always return false. However,
>>>
>>> session().get_session_cookie();
>>>
>>> does return a string. Am I misunderstanding http or the framework?
>>>
>>> Thank you!
>>> CN
>>>
>>> -- http://www.fastmail.fm - Choose from over 50 domains or use your own
>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Rapidly troubleshoot problems before they affect your business. Most IT
>>> organizations don't have a clear picture of how application performance
>>> affects their revenue. With AppDynamics, you get 100% visibility into
>>> your
>>> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of
>>> AppDynamics Pro!
>>>
>>> http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
>>> _______________________________________________
>>> Cppcms-users mailing list
>>> Cpp...@li...
>>> https://lists.sourceforge.net/lists/listinfo/cppcms-users
>>>
>>>
>>
>>
>> ------------------------------------------------------------------------------
>> Rapidly troubleshoot problems before they affect your business. Most IT
>> organizations don't have a clear picture of how application performance
>> affects their revenue. With AppDynamics, you get 100% visibility into your
>> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics
>> Pro!
>>
>> http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
>> _______________________________________________
>> Cppcms-users mailing list
>> Cpp...@li...
>> https://lists.sourceforge.net/lists/listinfo/cppcms-users
>>
>>
>
>
> --
> Respect,
> Shiv Shankar Dayal
>
>
> ------------------------------------------------------------------------------
> Rapidly troubleshoot problems before they affect your business. Most IT
> organizations don't have a clear picture of how application performance
> affects their revenue. With AppDynamics, you get 100% visibility into your
> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics
> Pro!
> http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
> _______________________________________________
> Cppcms-users mailing list
> Cpp...@li...
> https://lists.sourceforge.net/lists/listinfo/cppcms-users
>
>
|