ReCaptcha在iPhone上无法正常工作

4 回答

• 1

  就像那个问题iOS: Authentication using XMLHttpRequest - Handling 401 reponse最简单的解决方法是忽略自然 Headers 验证，并在回调成功时，用一些标志验证 .

  我看过一些这样的案例，从来没有闻到过好的 .

  回复于 2024-05-03T16:05:57+08:00
• 0

  您的“remoteIP”变量是否在客户端正确设置？

  即使您的Ajax请求发送空值或假值，php脚本中的isset（）函数也将返回true，从而错误地填充$ remoteIp .

  尝试做：

  $remoteIp = $_SERVER['REMOTE_ADDR'];
  

  Ajax只是让浏览器执行请求，因此PHP可以完美地获取用户的ip .

  我敢肯定，如果你传递错误的 Value ，ReCaptcha会以这种或那种方式陷入困境 .

  从不信任任何Javascript变量也比Ajax更安全，因为那些也应该被视为用户输入 .

  回复于 2024-05-03T16:05:57+08:00
• 0

  验证码旨在防止恶意客户端（机器人），所以理论上 if a client bypasses the captcha, it is a server side problem. （但是，如果客户端无法完成验证码，则可能是服务器端问题或客户端问题 . ）

  所以问题必须在服务器上 . 即使出于安全考虑，您应该使用 $_SERVER['REMOTE_ADDR'] 而不是 $_POST['remoteIp'] ，因为 $_POST['remoteIp'] 可能是伪造的（由恶意客户端） . 事实上， $_SERVER['REMOTE_ADDR'] 比客户端 $_POST['remoteIp'] 更可靠 .

  回复于 2024-05-03T16:05:57+08:00
• 0

  我在2或3个月前创建了一个仍然完美的脚本，试试这个：

  <?php
  $siteKey = ''; // Public Key
  $secret = ''; // Private Key
  /**
   * This is a PHP library that handles calling reCAPTCHA.
   *    - Documentation and latest version
   *          https://developers.google.com/recaptcha/docs/php
   *    - Get a reCAPTCHA API Key
   *          https://www.google.com/recaptcha/admin/create
   *    - Discussion group
   *          http://groups.google.com/group/recaptcha
   *
   * @copyright Copyright (c) 2014, Google Inc.
   * @link      http://www.google.com/recaptcha
   *
   * Permission is hereby granted, free of charge, to any person obtaining a copy
   * of this software and associated documentation files (the "Software"), to deal
   * in the Software without restriction, including without limitation the rights
   * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
   * copies of the Software, and to permit persons to whom the Software is
   * furnished to do so, subject to the following conditions:
   *
   * The above copyright notice and this permission notice shall be included in
   * all copies or substantial portions of the Software.
   *
   * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
   * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
   * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
   * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
   * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
   * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
   * THE SOFTWARE.
   */
  /**
   * A ReCaptchaResponse is returned from checkAnswer().
   */
  class ReCaptchaResponse
  {
      public $success;
      public $errorCodes;
  }
  class ReCaptcha
  {
      private static $_signupUrl = "https://www.google.com/recaptcha/admin";
      private static $_siteVerifyUrl =
          "https://www.google.com/recaptcha/api/siteverify?";
      private $_secret;
      private static $_version = "php_1.0";
      /**
       * Constructor.
       *
       * @param string $secret shared secret between site and ReCAPTCHA server.
       */
      function ReCaptcha($secret)
      {
          if ($secret == null || $secret == "") {
              die("To use reCAPTCHA you must get an API key from <a href='"
                  . self::$_signupUrl . "'>" . self::$_signupUrl . "</a>");
          }
          $this->_secret=$secret;
      }
      /**
       * Encodes the given data into a query string format.
       *
       * @param array $data array of string elements to be encoded.
       *
       * @return string - encoded request.
       */
      private function _encodeQS($data)
      {
          $req = "";
          foreach ($data as $key => $value) {
              $req .= $key . '=' . urlencode(stripslashes($value)) . '&';
          }
          // Cut the last '&'
          $req=substr($req, 0, strlen($req)-1);
          return $req;
      }
      /**
       * Submits an HTTP GET to a reCAPTCHA server.
       *
       * @param string $path url path to recaptcha server.
       * @param array  $data array of parameters to be sent.
       *
       * @return array response
       */
      private function _submitHTTPGet($path, $data)
      {
          $req = $this->_encodeQS($data);
          $response = file_get_contents($path . $req);
          return $response;
      }
      /**
       * Calls the reCAPTCHA siteverify API to verify whether the user passes
       * CAPTCHA test.
       *
       * @param string $remoteIp   IP address of end user.
       * @param string $response   response string from recaptcha verification.
       *
       * @return ReCaptchaResponse
       */
      public function verifyResponse($remoteIp, $response)
      {
          // Discard empty solution submissions
          if ($response == null || strlen($response) == 0) {
              $recaptchaResponse = new ReCaptchaResponse();
              $recaptchaResponse->success = false;
              $recaptchaResponse->errorCodes = 'missing-input';
              return $recaptchaResponse;
          }
          $getResponse = $this->_submitHttpGet(
              self::$_siteVerifyUrl,
              array (
                  'secret' => $this->_secret,
                  'remoteip' => $remoteIp,
                  'v' => self::$_version,
                  'response' => $response
              )
          );
          $answers = json_decode($getResponse, true);
          $recaptchaResponse = new ReCaptchaResponse();
          if (trim($answers ['success']) == true) {
              $recaptchaResponse->success = true;
          } else {
              $recaptchaResponse->success = false;
              $recaptchaResponse->errorCodes = $answers [error-codes];
          }
          return $recaptchaResponse;
      }
  }
  
  $reCaptcha = new ReCaptcha($secret);
  
  if(isset($_POST["g-recaptcha-response"])) {
      $resp = $reCaptcha->verifyResponse(
          $_SERVER["REMOTE_ADDR"],
          $_POST["g-recaptcha-response"]
          );
      if ($resp != null && $resp->success) {echo "OK";}
      else {echo "CAPTCHA incorrect";}
      }
  ?>
  
  <html>
  
  <head>
  <title>Google reCAPTCHA</title>
  <script src="https://www.google.com/recaptcha/api.js"></script>
  </head>
  
  <body>
  <form action="reCAPTCHA.php" method="POST">
  <input type="submit" value="Submit">
  <div class="g-recaptcha" data-sitekey="<?php echo $siteKey; ?>"></div>
  </form>
  </body>
  
  </html>
  

  通常，它应该工作（只需添加你的私钥和你的公钥），我在我的iPhone SE上测试，2秒前，它工作得很好 .

  回复于 2024-05-03T16:05:57+08:00