Archive
Monthly
Go
|
|
DNN Blog
Mar
27
Posted by:
Charles Nurse
3/27/2006
As part of the Membership enhancments for 3.3/4.1, I have just finished updating the repository with a new "Captcha" Control. So you are asking, what is a Captcha Control. In simple terms it is a Server Control that requires the "user" to enter a randomly generated "Human Readable Security Code". Captcha is often used in e-commerce situations, and to stop dictionary based denial of service attacks. The new Captcha control will be available as part of the core, so any module could use it (for example Forums or Blogs to stop Forum and Blog spam). If you would like more information on Captcha: http://www.captcha.net/http://en.wikipedia.org/wiki/Captchahttp://www.codeproject.com/aspnet/CaptchaImage.aspWe will be adding an Administrator option to include the use of Captcha in the new "SignIn" and "Register" controls.
9 comment(s) so far...
Re: Major Changes in Membership/Roles/Profile (2) - Captcha Control
Hi Charles,
did you maybe look into options of defining a user profile per portal?
this would give us great possibilities of extending (or reducing) the user info, and also give us room to make some really great membership modules.
Cheers!
Vladan
By vladan on
3/28/2006
|
Re: Major Changes in Membership/Roles/Profile (2) - Captcha Control
hi Charles,
one more thing, this one is a *showstopper*.
Currently when you define your own register page and put your own register module on (with custom fields), you can only see it either when you register or change you own info.
The functionality for showing that *custom* register module is not made for user accounts page/module - it would be great if you could also make it so that if a register page is defined that in user management when you add/edit user that page is shown
(I've done this a few times and it's not a big change to make if I only look at the change itself)
enough food for thought :)
Cheers!
Vladan
By vladan on
3/28/2006
|
Re: Major Changes in Membership/Roles/Profile (2) - Captcha Control
On the wikipedia, there is a large section on accesibility w.r.t. captchas. Before using it as default in any login mechanism on a website, I think it is wise to determine whether you really need it...
Using it as gadget means that you will exclude visitors, who are visually impaired.
Peter
By schotman on
3/29/2006
|
Re: Major Changes in Membership/Roles/Profile (2) - Captcha Control
Use of CAPTCHA is optional and by default it will not be enabled in the DNN login module. The Profile has been completely overhauled for the next release - providing the Administrator with full control over the fields which are displayed ( you can even dynamically add your own ). The same Profile UI is now used in the both user registration and manage user account ( admin ).
By sbwalker on
3/29/2006
|
Re: Major Changes in Membership/Roles/Profile (2) - Captcha Control
A couple of thoughts:
1) Some forms of Captcha have been broken, so I hope this is going to be provider-based. How many/which Captcha formats is the Core Team looking to provide in the primary distribution?
2) As for the visually impared, good catch! Perhaps there should be a profile setting to let an administrator define that someone is visually impared--which then, for that user only, would suppress the Captcha (or maybe replace it with an in-line audio snippet telling them what to key in)...
By RLyda on
3/30/2006
|
Re: Major Changes in Membership/Roles/Profile (2) - Captcha Control
I am aware of the ability to break captcha's - for instance a UC Berkely/Simon Fraser University joint program claims a 92% success rate at solving the GIMPY captcha used by Yahoo.
The Captcha is provided as a control. Its use is configured by the Administrator ie "Use Captcha on Login ". The Captcha is configurable to a degree, and probably in a future release it will be enhanced to provide audio capabailities.
By default it is switched off, so an Administrator must switch it on to use it. I suspect that <20% will actually use it.
By cnurse on
3/31/2006
|
Re: Major Changes in Membership/Roles/Profile (2) - Captcha Control
Hi Charles,
I'm sure you are aware of this but there is a bug in the Captcha control where it only diplays 5 chars sometime and then fails validation.
It would also be nice to be able to configure the number of chars.
Great Work!
By rodneyjoyce on
9/22/2006
|
Re: Major Changes in Membership/Roles/Profile (2) - Captcha Control
I really like this for my app....I am not completely sure how to use it yet though!
By MafruhaC on
12/15/2006
|
Re: Major Changes in Membership/Roles/Profile (2) - Captcha Control
I was interested in the comment above that Capatcha may be updated to support audio in the future. Since that was a 2006 comment, I wonder if anyone in DNN project can advise if they plan to make this enhancement. Captcha is not accessible by people with visual impairments without an audio option. This is well-known in the industry and many tools incorporate the advanced version that supports audio.
Thank you!
By MataiNet on
9/1/2009
|
|