Changeset 3688 in products for quintagroup.formlib.captcha/trunk/quintagroup/formlib/captcha/widget.py

Timestamp:

Jun 27, 2013 4:37:33 PM (11 years ago)

Author:

potar

Message:

disable in-line validation for captcha

File:

• quintagroup.formlib.captcha/trunk/quintagroup/formlib/captcha/widget.py (modified) (2 diffs)

quintagroup.formlib.captcha/trunk/quintagroup/formlib/captcha/widget.py

@@ -16 +16 @@
 from Products.CMFCore.interfaces import ISiteRoot
 
-from quintagroup.captcha.core.utils import decrypt, parseKey, encrypt1, getWord
+from quintagroup.captcha.core.utils import (decrypt, parseKey,
+                                            encrypt1, getWord,
+                                            detectInlineValidation)
+
+try:
+    from plone.app.form import inline_validation
+except ImportError:
+    # BBB Plone < 4.3 compatibility.
+    # The implementation of inline validation was switched
+    # to a non-KSS-based in plone.app.form-2.2.0
+    from plone.app.form.kss import validation as inline_validation
 
 _ = MessageFactory('quintagroup.formlib.captcha')
@@ -63 +73 @@
 
     def _toFieldValue(self, input):
-        # Verify the user input against the captcha
+        # Captcha validation is one-time process to prevent hacking
+        # This is the reason for in-line validation to be disabled.
+        if detectInlineValidation(inline_validation):
+            return input
 
-        # get captcha type (static or dynamic)
+        # Verify the user input against the captcha.
+        # Get captcha type (static or dynamic)
         site = self.get_site()
         captcha_type = site.getCaptchaType()