From d6ae970785092124adbe48eb9a759c8c804b13a6 Mon Sep 17 00:00:00 2001
From: Lukas Fleischer <lfleischer@archlinux.org>
Date: Fri, 6 Sep 2019 14:34:38 -0400
Subject: Add a simple CAPTCHA to the sign up form

Add a CAPTCHA to protect against automated account creation. The CAPTCHA
changes whenever three new accounts are registered.

Signed-off-by: Lukas Fleischer <lfleischer@archlinux.org>
---
 web/template/account_edit_form.php | 11 +++++++++++
 1 file changed, 11 insertions(+)

(limited to 'web/template/account_edit_form.php')

diff --git a/web/template/account_edit_form.php b/web/template/account_edit_form.php
index 38d5274c..5e84aa71 100644
--- a/web/template/account_edit_form.php
+++ b/web/template/account_edit_form.php
@@ -174,6 +174,17 @@
 		</p>
 	</fieldset>
 
+	<?php if ($A != "UpdateAccount"): ?>
+	<fieldset>
+		<legend><?= __("To protect the AUR against automated account creation, we kindly ask you to provide the output of the following command:") ?> <code><?= htmlspecialchars($captcha_challenge) ?></code></legend>
+		<p>
+			<label for="id_captcha"><?= __("Answer") ?>:</label>
+			<input type="text" size="30" maxlength="6" name="captcha" id="id_captcha" value="<?= htmlspecialchars($captcha, ENT_QUOTES) ?>" /> (<?= __("required") ?>)
+			<input type="hidden" name="captcha_salt" value="<?= htmlspecialchars($captcha_salt) ?>" />
+		</p>
+	</fieldset>
+	<?php endif; ?>
+
 	<fieldset>
 		<p>
 			<label></label>
-- 
cgit v1.2.3-24-g4f1b