I've completed a modification of the RC3 code that provides reCAPTCHA for people trying to open a ticket. This isn't the holy grail of CAPTCHA, because it is dependent on an external host to provide the CAPTCHA validation, however it is quick and clean for public based osTicket deployments.

I will work on a self contained open source CAPTCHA solution for osTicket as well...but this works for my current needs.

Supported version of OST: 1.6 RC3

Pros:

- really really easy to implement

- provides both visual and audio CAPTCHA

- does not require that your system have any additional libraries

- does not require any web server configuration changes

- available to any form within your sites domain...not just osTicket

Cons:

- requires that the osTicket server be able to communicate with the Internet

- requires that you modify the osTicket code (forward compatibility an issue)

Instructions:

1) register for an account at (reCAPTCHA)

2) copy your private and public key for safe keeping

3) download the recaptcha-php-1.10.zip file from reCAPTCHA

4) create a "recaptcha" directory under osTicket's root directory

5) place the contents of the recaptcha zip file into this directory

6) add the following lines to the include/client/open.inc.php file between line 106 and 107

<?php

require_once('recaptcha/recaptchalib.php');

$publickey = "your_public_key"; // you got this from the signup page

echo recaptcha_get_html($publickey);

7) add the following lines to the open.php file right after line 21

require_once('recaptcha/recaptchalib.php');

$privatekey = "your_private_key";

$resp = recaptcha_check_answer ($privatekey,

$_SERVER,

$_POST,

$_POST);

if (!$resp->is_valid) {

die ("The reCAPTCHA wasn't entered correctly. Go back and try it again." .

"(reCAPTCHA said: " . $resp->error . ")");

}

thats it...you now have CAPTCHA within your web form. what is great is that you can add that code to just about any form system within your site to have CAPTCHA spam prevention.

later...

jason...