From c471bfc76fd08ceb46a4fc2d5541377e0f4ef0d8 Mon Sep 17 00:00:00 2001
From: Simon Litt <slsoft@bk.ru>
Date: Thu, 11 Aug 2022 13:33:51 +0300
Subject: [PATCH] =?UTF-8?q?=D0=9A=D0=B0=D0=BF=D1=87=D0=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bug_report.php                |  7 ++++++
 bug_report_page.php           | 47 +++++++++++++++++++++++++++++++++++
 bug_view_inc.php              |  3 +++
 bugnote_add.php               |  7 ++++++
 bugnote_add_inc.php           | 44 ++++++++++++++++++++++++++++++++
 config/custom_strings_inc.php |  4 +++
 6 files changed, 112 insertions(+)

diff --git a/bug_report.php b/bug_report.php
index 80747fb..fbfa03d 100644
--- a/bug_report.php
+++ b/bug_report.php
@@ -84,6 +84,13 @@ if( $f_master_bug_id > 0 ) {
 	$t_project_id = $f_project_id;
 }
 
+$f_captcha	= gpc_get_string( 'captcha', '' );
+$f_captcha = mb_strtolower( trim( $f_captcha ) );
+$t_securimage = new Securimage();
+if( $t_securimage->check( $f_captcha ) == false ) {
+	trigger_error( ERROR_SIGNUP_NOT_MATCHING_CAPTCHA, ERROR );
+}
+
 $t_issue = array(
 	'project' => array( 'id' => $t_project_id ),
 	'reporter' => array( 'id' => auth_get_current_user_id() ),
diff --git a/bug_report_page.php b/bug_report_page.php
index 6c05baf..62abc6a 100644
--- a/bug_report_page.php
+++ b/bug_report_page.php
@@ -75,6 +75,9 @@ require_api( 'string_api.php' );
 require_api( 'utility_api.php' );
 require_api( 'version_api.php' );
 
+require_css( 'login.css' );
+require_js( 'login.js' );
+
 $f_master_bug_id = gpc_get_int( 'm_id', 0 );
 
 if( $f_master_bug_id > 0 ) {
@@ -758,6 +761,50 @@ if( $t_show_attachments ) {
 			</label>
 		</td>
 	</tr>
+	<?php //begin stone's captcha for anon login
+    if (current_user_is_anonymous())
+    {
+    ?>
+    <tr class="row-1">
+    <td class="category">
+        <span class="required"> * </span><?php echo lang_get( 'signup_captcha_request' ) ?>:
+    </td>
+    <td>
+        <?php 
+        
+        $t_securimage_path = 'vendor/dapphp/securimage';
+		$t_securimage_show = $t_securimage_path . '/securimage_show.php';
+		$t_securimage_play = $t_secur__FILE__image_path . '/securimage_play.swf?'
+			. http_build_query( array(
+				'audio_file' => $t_securimage_path . '/securimage_play.php',
+				'bgColor1=' => '#fff',
+				'bgColor2=' => '#fff',
+				'iconColor=' => '#777',
+				'borderWidth=' => 1,
+				'borderColor=' => '#000',
+			) );
+        
+        ?>
+        <span id="captcha-input" class="input">
+					<?php print_captcha_input( 'captcha' ); ?>
+
+					<span id="captcha-image" class="captcha-image" style="padding-right:3px;">
+						<img src="<?php echo $t_securimage_show; ?>" alt="visual captcha" />
+						<ul id="captcha-refresh"><li><a href="#" onclick="window.refresh=function(e){var img = $('#captcha-image img');var captcha = img.attr('src');img.attr('src', captcha.split('?', 1) + '?' + Math.random());$('#captcha-field').focus();e.preventDefault();}"><?php
+							echo lang_get( 'signup_captcha_refresh' );
+						?></a></li></ul>
+					</span>
+
+					<object type="application/x-shockwave-flash" width="19" height="19"
+						data="<?php echo $t_securimage_play; ?>">
+						<param name="movie" value="<?php echo $t_securimage_play; ?>" />
+					</object>
+				</span>
+    </td>
+	</tr>
+    <?php
+    }
+//end of stone's captcha for anon login?>
 </table>
 </div>
 </div>
diff --git a/bug_view_inc.php b/bug_view_inc.php
index 7d39c9d..cdb6d13 100644
--- a/bug_view_inc.php
+++ b/bug_view_inc.php
@@ -77,6 +77,9 @@ require_api( 'version_api.php' );
 
 require_css( 'status_config.php' );
 
+require_css( 'login.css' );
+require_js( 'login.js' );
+
 $f_issue_id = gpc_get_int( 'id' );
 $f_history = gpc_get_bool( 'history', config_get( 'history_default_visible' ) );
 
diff --git a/bugnote_add.php b/bugnote_add.php
index 39b5d52..db530a6 100644
--- a/bugnote_add.php
+++ b/bugnote_add.php
@@ -60,6 +60,13 @@ $t_data = array(
 	'payload' => $t_payload,
 );
 
+$f_captcha	= gpc_get_string( 'captcha', '' );
+$f_captcha = mb_strtolower( trim( $f_captcha ) );
+$t_securimage = new Securimage();
+if( $t_securimage->check( $f_captcha ) == false ) {
+	trigger_error( ERROR_SIGNUP_NOT_MATCHING_CAPTCHA, ERROR );
+}
+
 $t_command = new IssueNoteAddCommand( $t_data );
 $t_command->execute();
 
diff --git a/bugnote_add_inc.php b/bugnote_add_inc.php
index 30bc58b..da47db8 100644
--- a/bugnote_add_inc.php
+++ b/bugnote_add_inc.php
@@ -119,7 +119,51 @@ require_api( 'lang_api.php' );
 					<textarea name="bugnote_text" id="bugnote_text" class="<?php echo $t_bugnote_class ?>" rows="7"></textarea>
 				</td>
 			</tr>
+<?php
+//begin stone's captcha for anon login
+    if (current_user_is_anonymous())
+    {
+    ?>
+    <tr class="row-1">
+    <td class="category">
+        <span class="required"> * </span><?php echo lang_get( 'signup_captcha_request' ) ?>:
+    </td>
+    <td>
+        <?php 
+        
+        $t_securimage_path = 'vendor/dapphp/securimage';
+		$t_securimage_show = $t_securimage_path . '/securimage_show.php';
+		$t_securimage_play = $t_secur__FILE__image_path . '/securimage_play.swf?'
+			. http_build_query( array(
+				'audio_file' => $t_securimage_path . '/securimage_play.php',
+				'bgColor1=' => '#fff',
+				'bgColor2=' => '#fff',
+				'iconColor=' => '#777',
+				'borderWidth=' => 1,
+				'borderColor=' => '#000',
+			) );
+        
+        ?>
+        <span id="captcha-input" class="input">
+					<?php print_captcha_input( 'captcha' ); ?>
+
+					<span id="captcha-image" class="captcha-image" style="padding-right:3px;">
+						<img src="<?php echo $t_securimage_show; ?>" alt="visual captcha" />
+						<ul id="captcha-refresh"><li><a href="#" onclick="window.refresh=function(e){var img = $('#captcha-image img');var captcha = img.attr('src');img.attr('src', captcha.split('?', 1) + '?' + Math.random());$('#captcha-field').focus();e.preventDefault();}"><?php
+							echo lang_get( 'signup_captcha_refresh' );
+						?></a></li></ul>
+					</span>
 
+					<object type="application/x-shockwave-flash" width="19" height="19"
+						data="<?php echo $t_securimage_play; ?>">
+						<param name="movie" value="<?php echo $t_securimage_play; ?>" />
+					</object>
+				</span>
+    </td>
+	</tr>
+    <?php
+    }
+//end of stone's captcha for anon login?>
 <?php
 	if( config_get( 'time_tracking_enabled' ) ) {
 		if( access_has_bug_level( config_get( 'time_tracking_edit_threshold' ), $f_bug_id ) ) {
diff --git a/config/custom_strings_inc.php b/config/custom_strings_inc.php
index 8bae9a1..eb7ea79 100644
--- a/config/custom_strings_inc.php
+++ b/config/custom_strings_inc.php
@@ -9,6 +9,8 @@ switch( $g_active_language ) {
 		$s_process_bug_button = 'В процессе';
 
 		$s_email_notification_title_for_status_bug_process = 'Следующая задача В ПРОЦЕССЕ:';
+		
+		$s_signup_captcha_request = 'Введите код с картинки';
 		break;
 
 	default: # english
@@ -18,5 +20,7 @@ switch( $g_active_language ) {
 		$s_testing_bug_button = 'Ready for Process';
 
 		$s_email_notification_title_for_status_bug_testing = 'The following issue is ready for PROCESS.';
+		
+		$s_signup_captcha_request = 'Enter the code from the image';
 		break;
 }
-- 
2.35.1