SI CAPTCHA Anti-Spam

=== SI CAPTCHA Anti-Spam === Contributors: Mike Challis Author URI: http://www.642weather.com/weather/scripts.php Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=KXJWLPPWZG83S Tags: akismet, captcha, comment, comments, login, anti-spam, spam, security, multilingual, buddypress, wpmu, wordpressmu Requires at least: 2.9 Tested up to: 3.9.1 Stable tag: trunk

Adds CAPTCHA anti-spam methods to WordPress on the forms for comments, registration, lost password, login, or all. For WP, WPMU, and BuddyPress.

== Description ==

Adds CAPTCHA anti-spam methods to WordPress forms for comments, registration, lost password, login, or all. In order to post comments or register, users will have to type in the code shown on the image. This prevents spam from automated bots. Adds security. Works great with Akismet. Also is fully WP, WPMU, and BuddyPress compatible.

= Help Keep This Plugin Free =

If you find this plugin useful to you, please consider making a small donation to help contribute to my time invested and to further development. Thanks for your kind support! - Mike Challis

Features:

• Configure from Admin panel
• Valid HTML
• Section 508 and WAI Accessibility Validation.
• Allows Trackbacks and Pingbacks.
• Setting to hide the CAPTCHA from logged in users and or admins
• Setting to show the CAPTCHA on the forms for comments, registration, lost password, login, or all.
• I18n language translation support. See FAQ.

Captcha Image Support:

• Open-source free PHP CAPTCHA library by www.phpcaptcha.org is included (customized version)
• Abstract background with multi colored, angled, and transparent text
• Arched lines through text
• Refresh button to reload captcha if you cannot read it

Requirements/Restrictions:

• Works with Wordpress 2.9+, WPMU, and BuddyPress (Wordpress 3.6+ is highly recommended)
• PHP5+ is highly recommended

== Installation ==

1. Install automatically through the Plugins, Add New menu in WordPress, or upload the si-captcha-for-wordpress folder to the /wp-content/plugins/ directory.

2. Activate the plugin through the Plugins menu in WordPress

3. Updates are automatic. Click on "Upgrade Automatically" if prompted from the admin menu. If you ever have to manually upgrade, simply deactivate, uninstall, and repeat the installation steps with the new version.

4. This is how to install SI Captcha globally on WPMU or BuddyPress:

5. Step 1: upload the /si-captcha-for-wordpress/ folder and all it's contents to /mu-plugins/

6. Step 2: MOVE the si-captcha.php from the /si-captcha-for-wordpress/ folder to the /mu-plugins/ folder.

7. Site wide Settings are located in "Site Admin", "SI CAPTCHA Options"

== Screenshots ==

1. screenshot-1.gif is the captcha on the comment form.

2. screenshot-2.gif is the captcha on the registration form.

3. screenshot-3.gif is the Captcha options tab on the Admin Plugins page.

== Configuration ==

After the plugin is activated, you can configure it by selecting the SI Captcha options tab on the Admin Plugins page.

== Usage ==

Once activated, a captcha image and captcha code entry is added to the comment and register forms. The Login form captcha is not enabled by default because it might be annoying to users. Only enable it if you are having spam problems related to bots automatically logging in.

== Frequently Asked Questions ==

= Spammers have been able to bypass my CAPTCHA, what can I do? =

First check this: make sure the only other security plugins you have are Akismet or WP-spamFree. Akismet and WP-spamFree are the only other anti-spam plugins approved for use with SI CAPTCHA Anti-Spam, others can simply break the CAPTCHA validation so that the CAPTCHA is never checked. If another security plugin is combined(not Akismet or WP-spamFree), the captcha may not block invalid code! Be sure to always test all the CAPTCHA forms after installing or updating themes or plugins.

Sometimes your site becomes targeted by a spammer that uses a combination of a bot and human captcha solver. See this help forum for a solution

Try enabling the setting "Enable honeypot spambot trap" on the plugin settings page.

Try allowing only Registered users to post, and or moderating comments. Read more about Combating Comment Spam

= How can I change the color of the CAPTCHA input field on the comment form? = If you need to learn how to adjust the captcha input form colors, See this FAQ

= Troubleshooting if the CAPTCHA form fields and image is not being shown: =

Do this as a test: Activate the SI CAPTCHA plugin. In Admin, click on Appearance, Themes. Temporarily change your theme to the "WordPress Default" theme (default for WP2), or "Twenty Ten" (default for WP3). It does not cause any harm to temporarily change the theme and change back. Does it work properly now? If it does then the theme you are using is the cause.

Missing CAPTCHA image and input field on comment form? You may have a theme that has a not properly coded comments.php

When diagnosing missing CAPTCHA field on comment form.... The version of WP makes a difference...

(WP2 series) Your theme must have a <?php do_action('comment_form', $post->ID); ?> tag inside your /wp-content/themes/[your_theme]/comments.php file. Most WP2 themes already do. The best place to locate the tag is before the comment textarea, you may want to move it up if it is below the comment textarea.

(WP3 series) Since WP3 there is new function comment_form inside /wp-includes/comment-template.php. Your is theme probably not up to current code to call that function from inside comments.php. WP3 theme does not need the do_action('comment_form'... code line inside /wp-content/themes/[your_theme]/comments.php. Instead, it uses a new function call inside comments.php: <?php comment_form(); ?> If you have WP3 and still have the missing captcha, make sure your theme has <?php comment_form(); ?> inside /wp-content/themes/[your_theme]/comments.php. (look inside the Twenty Ten theme's comments.php for proper example)

= Troubleshooting if the CAPTCHA image itself is not being shown: =

By default, the admin will not see the CAPTCHA. If you click "log out", go look and it will be there.

If the image is broken and you have the CAPTCHA entry box:

This can happen if a server has folder permission problem, or the WordPress address (URL) or Blog address (URL) are set incorrectly in WP settings: Admin, Settings, General

See FAQ page on fixing this problem

= Sometimes the captcha image and captcha input field are displayed AFTER the submit button on the WP2 comment form. =

WP2.0 themes must have a <?php do_action('comment_form', $post->ID); ?> tag inside the /wp-content/themes/[your_theme]/comments.php file. Most WP2 themes do. The best place to locate the tag is before the comment textarea, you may want to move it if it is below the comment textarea. This tag is exactly where the captcha image and captcha code entry will display on the form, so move the line to before the comment textarea, uncheck the 'Comment Form Rearrange' box on the 'Captcha options' page, and the problem should be fixed. (WP3 with a WP3 proper theme will not have this problem)

= Alternate Fix for the captcha image display order =

You can just check the 'Comment Form Rearrange' box on the admin plugins 'Captcha options' page and javascript will attempt to rearrange it for you. Editing the comments.php, moving the tag, and uncheck the 'Comment Form Rearrange' box on the 'SI Captcha options' page is the best solution.(WP3 with a WP3 theme will not have this problem)

= Why is it better to uncheck the 'Comment Form Rearrange' box and move the tag? = Because the XHTML will no longer validate if it is checked.

= The CAPTCHA refresh button does not work =

Your theme could be missing the wp_footer PHP tag. Your theme should be considered broken if the wp_footer PHP tag is missing.

All WordPress themes should always have <?php wp_footer(); ?> PHP tag just before the closing </body> tag of your theme's footer.php, or you will break many plugins which generally use this hook to reference JavaScript files. The solution: edit your theme's footer.php and make sure this tag is there. If it is missing, add it. Next, be sure to test that the CAPTCHA refresh button works, if it does not work and you have performed this step correctly, you could have some other cause.

= The CAPTCHA is not working and I cannot login at my login page = This failure could have been caused by another plugin conflict with this one. If you use CAPTCHA on the login form and ever get locked out due to CAPTCHA is broken, here is how to get back in: FTP to your WordPress directory /wp-content/plugins/ Delete this folder: si-captcha-for-wordpress This manually removes the plugin so you should be able to login again.

= Is this plugin available in other languages? =

Yes. To use a translated version, you need to obtain or make the language file for it. At this point it would be useful to read Installing WordPress in Your Language from the Codex. You will need an .mo file for this plugin that corresponds with the "WPLANG" setting in your wp-config.php file. Translations are listed below -- if a translation for your language is available, all you need to do is place it in the /wp-content/plugins/si-captcha-for-wordpress/languages directory of your WordPress installation. If one is not available, and you also speak good English, please consider doing a translation yourself (see the next question).

The following translations are included in the download zip file:

• Albanian (sq_AL) - Translated by Romeo Shuka
• Arabic (ar) - Translated by Amine Roukh
• Belorussian (by_BY) - Translated by Marcis Gasuns
• Chinese (zh_CN) - Translated by Awu
• Czech (cs_CZ) - Translated by Radovan
• Danish (da_DK) - Translated by Parry
• Dutch (nl_NL) - Translated by Robert Jan Lamers
• French (fr_FR) - Translated by Pierre Sudarovich
• German (de_DE) - Translated by Sebastian Kreideweiss
• Greek (el) - Translated by Ioannis
• Hungarian (hu_HU) - Translated by [Vil]
• Indonesian (id_ID) - Translated by Masino Sinaga
• Italian (it_IT) - Translated by Gianni Diurno
• Japanese (ja) - Translated by Chestnut
• Lithuanian (lt_LT) - Translated by Vincent G
• Norwegian (nb_NO) - Translated by Roger Sylte
• Polish (pl_PL) - Translated by Tomasz
• Portuguese Brazil (pt_BR) - Translated by [Newton Dan Faoro]
• Portuguese Portugal (pt_PT) - Translated by PL Monteiro
• Romanian (ro_RO) - Translated by Laszlo SZOKE
• Russian (ru_RU) - Translated by Neponyatka
• Serbian (sr_SR) - Translated by [Milan Dinic]
• Slovakian (sk_SK) - Translated by [Marek Chochol]
• Spanish (en_ES) - Translated by zinedine
• Swedish (sv_SE) - Translated by [Benct]
• Traditional Chinese, Taiwan Language (zh_TW) - Translated by [Cjh]
• Turkish (tr_TR) - Translated by [Burak Yavuz]
• More are needed... Please help translate.

= Can I provide a new translation? =

Yes please. Please read How to translate SI Captcha Anti-Spam for WordPress

= Can I update a translation? =

Yes please. Please read How to update a translation of SI Captcha Anti-Spam for WordPress

== Changelog ==

• akismet 3.xx compatible

= 2.7.7.4 =

• (15 May 2014) - Removed themefuse ad
• tested for WP 3.9.1

= 2.7.7.3 =

• (18 Nov 2013) - Update Turkish Language.

= 2.7.7.2 =

• (19 Oct 2013) - improve readability of CAPTCHA image.

= 2.7.7.1 =

• (18 Jul 2013) - added captcha font randomization.
• fix captcha gd font fallback.

= 2.7.7 =

• (13 Jul 2013) - Bug fixes and code cleanup.
• Update Turkish language (tr_TR) - Translated by [Burak Yavuz]

= 2.7.6.4 =

• (05 Jan 2013) - added new setting "Enable honeypot spambot trap". Enables empty field token honyepot trap. For best results, do not enable unless you have a spam bot problem. Does not stop human spammers.
• fixed some bugs.

= 2.7.6.2 =

• (23 Dec 2012) - fixed some bugs with login redirect.

= 2.7.6.1 =

• (17 Dec 2012) - fixed some bugs.
• cleaned up some code.
• added settings to change all the error messages.

= 2.7.6 =

• (15 Dec 2012) - Tested compatible with WP 3.5
• improved spam bot detection.
• Removed CAPTCHA test pages.
• Fix possible error: preg_match() expects parameter to be string.
• Other optimizations.
• Updated Dutch language (nl_NL) - Translated by Paul Backus
• Updated Italian language (it_IT) - Translated by [Gianni Diurno](http://gidibao.net/