#42 Disable CAPTCHA for Administrators / Moderators - patch.

[Anonymous]

Originally created by: zburlind...@gmail.com

What steps will reproduce the problem?
1. Captcha cannot be disabled for Admins / Moderators
2.
3.

What is the expected output? What do you see instead?
Since Admins / Moderators post also, for them it is very difficult to type the Captcha everytime.

What version of the product are you using? On what operating system,
database, and application server/servlet container?
* Product: JForum 2.3.4
* OS: Windows
* DB: MySQL
* AP: Tomcat

Please provide any additional information below.

I'm a moderator of one of the forums using jForum2 and once I had access to the moderators area, I discovered that people complained a lot about Captcha. It is a welcomed measure against anti-spam but Administrators can delete the whole database so Captcha doesn't serve any purpose against them.

I've created a small patch to fix this.

a) It adds a new entry in the Configuration screen named "Enable Captcha For Admins / Moderators" with the default value False.
b) It changes the CAPTCHA_POST detection so that userId is also taken into account.

It only ignores CAPTCHA_POST for for PERM_MODERATION / PERM_ADMINISTRATION but Not for PERM_MODERATION with a specific forumId, which means that it will work for Administrators / Global Moderators but not for the moderators of a specific forum.

[Anonymous]

Originally posted by: colton.e...@sparksisthegeek.com

I think that perhaps removing captcha for posting is fine.  But I think that running sql commands should require a captcha challenge per line ;-)  That way you don't accidentally delete the database.

[Anonymous]

Originally posted by: andow...@gmail.com

How about commit this patch yourself? Please write an email to me(andowson@gmail.com) and tell me your googlecode account.

[Ulf Dittmer]

The patch has been applied to the source code.