parent
4d70ee6c83
commit
db6f87d013
|
|
@ -4,6 +4,8 @@ include getenv("DOCUMENT_ROOT")."/include/session_include.php";
|
|||
|
||||
$confirmID = trim($_POST['confirmID']);
|
||||
$confirmPW = $_POST['confirmPW'];
|
||||
// 추가: $action 변수가 POST로 넘어오지 않을 경우를 대비해 REQUEST로 받습니다.
|
||||
$action = $_REQUEST['action'];
|
||||
|
||||
if($action == "login") {
|
||||
|
||||
|
|
@ -12,16 +14,14 @@ if($action == "login") {
|
|||
function post_captcha($user_response) {
|
||||
$fields_string = '';
|
||||
$fields = array(
|
||||
'secret' => '6LcrsY0sAAAAADwNiCoXbFPEDFbf0GssVRXeJi1X',
|
||||
'secret' => '6LelsdAsAAAAALBiK4XNVcAE6sLTNcGPbgvawT8v',
|
||||
'response' => $user_response
|
||||
);
|
||||
foreach($fields as $key=>$value)
|
||||
$fields_string .= $key . '=' . $value . '&';
|
||||
$fields_string = rtrim($fields_string, '&');
|
||||
$fields_string = http_build_query($fields); // 기존 루프 대신 더 안전한 방식
|
||||
|
||||
$ch = curl_init();
|
||||
curl_setopt($ch, CURLOPT_URL, 'https://www.google.com/recaptcha/api/siteverify');
|
||||
curl_setopt($ch, CURLOPT_POST, count($fields));
|
||||
curl_setopt($ch, CURLOPT_POST, true);
|
||||
curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
|
||||
curl_setopt($ch, CURLOPT_RETURNTRANSFER, True);
|
||||
|
||||
|
|
@ -35,25 +35,18 @@ if($action == "login") {
|
|||
|
||||
|
||||
if ($_SERVER["REMOTE_ADDR"] == "127.0.0.1") {
|
||||
$res['success'] = 1;
|
||||
}
|
||||
else {
|
||||
// Call the function post_captcha
|
||||
$res['success'] = true;
|
||||
$res['score'] = 1.0; // 로컬은 만점 처리
|
||||
} else {
|
||||
$res = post_captcha($_POST['g-recaptcha-response']);
|
||||
}
|
||||
|
||||
if (!$res['success']) {
|
||||
// What happens when the CAPTCHA wasn't checked
|
||||
// echo '<p>Please go back and make sure you check the security CAPTCHA box.</p><br>';
|
||||
// echo "<SCRIPT LANGUAGE=\"JavaScript\">alert('Please go back and make sure you check the security CAPTCHA box.');history.back(-1);</SCRIPT>";
|
||||
// exit;
|
||||
if (!$res['success'] || (isset($res['score']) && $res['score'] < 0.5)) {
|
||||
addLog ("add", "USER", "LOGIN FAILED - CAPTCHA (Score: ".$res['score'].")", $lguserid, $confirmID, $lgno);
|
||||
|
||||
addLog ("add", "USER", "LOGIN FAILED - CAPTCHA", $lguserid, $confirmID, $lgno);
|
||||
|
||||
$msg = "<p>Please go back and make sure you check the security CAPTCHA box.</p>";
|
||||
$msg = " Verification failed. Please try again shortly.";
|
||||
$func -> modalMsg ($msg, "");
|
||||
exit;
|
||||
|
||||
}
|
||||
// End of Captcha
|
||||
|
||||
|
|
|
|||
|
|
@ -57,14 +57,9 @@ if ($_SESSION['ss_LOGIN'] == 1) {
|
|||
|
||||
</head>
|
||||
|
||||
<script src="https://www.google.com/recaptcha/api.js?onload=CaptchaCallback&render=explicit" async defer></script>
|
||||
<script src="https://www.google.com/recaptcha/api.js?render=6LelsdAsAAAAABezjgy67C3dnEAtEX0oojwdZWeh"></script>
|
||||
|
||||
|
||||
<script type="text/javascript">
|
||||
var CaptchaCallback = function() {
|
||||
grecaptcha.render('RecaptchaField1', {'sitekey' : '6LcrsY0sAAAAAHOpHP2HTaGYkb8szuaSiSX2KgvS'});
|
||||
grecaptcha.render('RecaptchaField2', {'sitekey' : '6LcrsY0sAAAAAHOpHP2HTaGYkb8szuaSiSX2KgvS'});
|
||||
};
|
||||
</script>
|
||||
|
||||
<style>
|
||||
@media (max-width:575px) {
|
||||
|
|
@ -100,16 +95,19 @@ if ($_SESSION['ss_LOGIN'] == 1) {
|
|||
|
||||
|
||||
<div class="container">
|
||||
<form method="post" role="form" class="form-login" action="/lib/login_process.php" data-aos="fade-up" data-aos-delay="100">
|
||||
<input type=hidden name=action value=login>
|
||||
<input type=hidden name=destination value=<?=$destination?>>
|
||||
<input type=hidden name=mode value=<?=$mode?>>
|
||||
<form id="login-form" method="post" role="form" class="form-login" action="/lib/login_process.php" data-aos="fade-up" data-aos-delay="100">
|
||||
<input type="hidden" name="action" value="login">
|
||||
<input type="hidden" name="destination" value="<?=$destination?>">
|
||||
<input type="hidden" name="mode" value="<?=$mode?>">
|
||||
|
||||
<input type="email" class="form-control" name="confirmID" id="email" required placeholder="Your Email" data-msg="Please enter a valid email">
|
||||
<input type="hidden" id="g-recaptcha-response" name="g-recaptcha-response">
|
||||
|
||||
<input type="password" class="form-control" name="confirmPW" id="password" required placeholder="Password" data-msg="Please enter a password">
|
||||
<label><div class="g-recaptcha" id="RecaptchaField1" required="required" required ></div></label>
|
||||
<div class="text-center"><button class="btn-primary" type="submit">LOGIN</button></div>
|
||||
<input type="email" class="form-control" name="confirmID" id="email" required placeholder="Your Email">
|
||||
<input type="password" class="form-control" name="confirmPW" id="password" required placeholder="Password">
|
||||
|
||||
<div class="text-center">
|
||||
<button class="btn-primary" type="button" onclick="runRecaptcha()">LOGIN</button>
|
||||
</div>
|
||||
</form>
|
||||
<div class="text-center mt-3">
|
||||
<small class="text-muted">
|
||||
|
|
@ -163,6 +161,30 @@ if ($_SESSION['ss_LOGIN'] == 1) {
|
|||
<!-- Template Main JS File -->
|
||||
<script src="assets/js/main.js"></script>
|
||||
|
||||
<!-- reChapchat v3. script 새로 추가 -->
|
||||
<script src="https://www.google.com/recaptcha/api.js?render=6LelsdAsAAAAABezjgy67C3dnEAtEX0oojwdZWeh"></script>
|
||||
|
||||
<script type="text/javascript">
|
||||
function runRecaptcha() {
|
||||
// 1. 폼 요소를 가져옵니다.
|
||||
var form = document.getElementById('login-form');
|
||||
|
||||
// 2. [핵심] 브라우저에게 "비어있는 칸이 있으면 말풍선을 띄워줘!"라고 명령합니다.
|
||||
if (!form.checkValidity()) {
|
||||
form.reportValidity(); // 말풍선.
|
||||
return; // 칸이 비어있으면 여기서 중단합니다.
|
||||
}
|
||||
|
||||
// 3. 모든 칸이 채워졌을 때만 캡차 실행
|
||||
grecaptcha.ready(function() {
|
||||
grecaptcha.execute('6LelsdAsAAAAABezjgy67C3dnEAtEX0oojwdZWeh', {action: 'login'}).then(function(token) {
|
||||
document.getElementById('g-recaptcha-response').value = token;
|
||||
form.submit(); // 검증 완료 후 제출
|
||||
});
|
||||
});
|
||||
}
|
||||
</script>
|
||||
|
||||
</body>
|
||||
|
||||
</html>
|
||||
Loading…
Reference in New Issue