TOPIC: PHP 5.4.9:captcha graphic not displayed, no one can register

Hi all,

go to our website http://www.nfj-hannover.de and try to register for any event.

But you can't register, since the graphic of the captcha field isn't displayed any more in the contact form.

What would you enter in a captcha field of a contact form if you wouldn't know, what to enter? :

The only thing I changed on my website, was to switch from PHP 5.2.17 to PHP 5.4.9 since our webhoster 1&1 won't support PHp 5.2.x starting April 1st 2013.

Oh, I forget to tell you: PHP 5.2.17 L: DTRegister captcha worked fine!

Happy new year,
Stefan

Stefan,

Thank you again for this update. Will pass along to our developers.

Have a Happy New Year!

Rich

Hi Rich,

I'm very sorry about my stupid and overhasty post.

Currently I'm working on .htaccess protection of my site.
I added

<Files "*.*">
Deny from all
</Files>
<FilesMatch "\.(js|css|png|jpg|jpeg|gif|ico|flv|swf)$">
Allow from all
</FilesMatch>

to nfj-hannover/components/.htaccess

and forgot that your function captchasecurityimages.php
has no chance of success with my .htaccess.

I had to write a new .htaccess for
nfj-hannover/components/com_dtregister:

<Files captchasecurityimages.php>
Allow from all
</Files>
<FilesMatch "\.(htm|html)$">
Allow from all
</FilesMatch>

and now captcha graphic is displayed in contact form.

I'm not very experienced in protecting websites with .htaccess; but I'm learning, and if s.o. should have better knowlegde I would be glad of any advice.

Regards,
Stefan

Thanks for the update.

There are some great Joomla extensions that offer help with securing your site. Try Admin Tools as well as some components from OSE.

Jen

I ran to the same problem with my .htacsess file, created by Akeeba Admin Tools. It blocks access to rouge PHP files as shown below:

## Disallow access to rogue PHP files throughout the site, unless they are explicitly allowed
RewriteCond %{REQUEST_FILENAME} (\.php)$
RewriteCond %{REQUEST_FILENAME} !(/index[23]?\.php)$
RewriteCond %{REQUEST_FILENAME} -f
RewriteRule (.*\.php)$ - [F]
##### Advanced server protection -- END

However, Admin Tools (via its .htacess maker) also allows access to specific PHP files, as shown here:

##### Advanced server protection rules exceptions -- BEGIN
RewriteRule ^components\/com_dtregister\/captchasecurityimages\.php$ - [L]
##### Advanced server protection rules exceptions -- END

So I can still protect my site with .htaccess file and let specific .php files be accessible. My .htaccess file is in the site's root folder.