Mantis Bug Tracker - Forums

Ok that was my fault, I thought I had http_api.php opened but I had html_api.php so oops.

I looked in that file and found nothing related to CSP.

I'm working on adding reCaptcha and hCaptcha to the core files on a pull request giving admins the choice on which Captcha to use. Anyway, I'm trying to find where CSP is handled so I can add the sites for google and hCaptcha to the headers. I can do it by a plugin for the time being but would rathe...

After some testing I found I don't need a new point added but being able to replace the captcha that exists now with custom code would be needed without editing core files.

It's easier to ask and the specific file be pointed out. I am programming an entire site so I don't have a lot of time to devote to diving into each and every file but I may take a day to make notes of which files handle what to make finding things easier.

I know how to trigger events but I wasn't sure about adding my own event to the core file because if I do that then it will get replaced on updates to Mantis so it would need to be done via a file similar to what we do with config_inc.php is that possible with adding my own event to html_api.php or ...

this is indeeed what was described on the Stackoverflow page :mrgreen: I didn't read everything on that page because I saw something in the first couple of posts that made me do another search which lead me to that issue I linked. But at least that is fixed and working, now I just need to figure ou...

I'm trying to find where between signup_page.php and signup.php the SQL query is initiated to insert new users after they click submit. I need to wrap in code just in case they failed the bot check or didn't do it at all.

Final update: After hours of digging and testing, this thread https://www.mantisbt.org/bugs/view.php?id=14679 had the answer. It was CSP blocking it from loading. Once I added the sites to CSP, it loaded and works. Now to figure out where it calls to insert the user so it can check for captcha befor...

UPDATE AGAIN: I think I found my problem and that is with content security policy so can someone let me know if I'm doing this right. function hooks(){ return array( "EVENT_CORE_HEADERS" => 'csp_headers', "EVENT_LAYOUT_RESOURCES" => 'scripts' ); } function csp_headers() { http_cs...

Update: I tried implementing hCaptcha and still have the same issue with the box not showing at all and I can't figure out what could be interfering to make it not show.

I did some tests on a completely new page I created called testload.php where I added everything and a test form. It all displays and shows correctly, I even added a script call before </head> making the google api call second to last and it still worked. So I'm wondering if there is something on th...

So you define your own event ( declare it within the plugin) and add the event statement @ the place where you require it. If it needs to be right before the </head> statement, you need to declare your event within function html_head_end which you can find within core/html_api.php Since I'm new to ...

Plugins are event based, you can find those back in core/events_inc.php You have various events available for the lay-out etcetra. In addition you can add events yourself ( although this requires an adjustment of the core code). The problem with events is they aren't where I need. Such as EVENT_LAY...

I'm wanting to know how I would replace code in the signup_page.php with my own form code. I'm also wanting to know how I can find the </head> tag and replace it with my code followed by the </head> tag.