Mercurial > hg > CAPTCHAmiddleware

annotate captchamiddleware/middleware.py @ 3:b0ef5452a740

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
beginning of captcha checking
author k0s <k0scist@gmail.com>
date Tue, 23 Feb 2010 20:08:22 -0500
parents c861518b2a44
children ce757057961c
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
0
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
1 """
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
2 CAPTCHA middleware
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
3 """
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
4
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
5 import os
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
6 import random
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
7 import sys
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
8 from lxml import etree
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
9 from lxmlmiddleware import LXMLMiddleware
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
10 from skimpyGimpy import skimpyAPI
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
11 from urllib2 import urlopen
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
12 from webob import Request, exc
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
13
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
14
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
15 class CAPTCHAmiddleware(LXMLMiddleware):
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
16 """
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
17 put CAPTCHAs on forms for unauthorized users
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
18 """
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
19
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
20 ### class level variables
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
21 defaults = {
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
22 'dictionary': '/usr/share/dict/words',
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
23 'error': '<span class="error">Please type the CAPTCHA</span>',
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
24 'minimum_length': 5,
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
25 'path': "/input[@type='submit']",
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
26 }
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
27
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
28 def __init__(self, app, **kw):
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
29 self.app = app
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
30
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
31 # set instance parameters from kw and defaults
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
32 for key in self.defaults:
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
33 setattr(self, key, kw.get(key, self.defaults[key]))
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
34 self.minimum_length = int(self.minimum_length)
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
35 assert os.path.exists(self.dictionary)
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
36
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
37 # get dictionary
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
38 if self.dictionary.startswith('http://') or self.dictionary.startswith('https://'):
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
39 f = urlopen(self.dictionary)
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
40 else:
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
41 f = file(self.dictionary)
2
c861518b2a44 fix bug whereby forbidden characters cause issues
k0s <k0scist@gmail.com>
parents: 1
diff changeset
42
c861518b2a44 fix bug whereby forbidden characters cause issues
k0s <k0scist@gmail.com>
parents: 1
diff changeset
43 # characters skimpygimpy doesnt know about
c861518b2a44 fix bug whereby forbidden characters cause issues
k0s <k0scist@gmail.com>
parents: 1
diff changeset
44 forbidden_characters = set(["'"])
c861518b2a44 fix bug whereby forbidden characters cause issues
k0s <k0scist@gmail.com>
parents: 1
diff changeset
45
3
b0ef5452a740 beginning of captcha checking
k0s <k0scist@gmail.com>
parents: 2
diff changeset
46 self.words = [ i.strip().lower() for i in f.readlines()
2
c861518b2a44 fix bug whereby forbidden characters cause issues
k0s <k0scist@gmail.com>
parents: 1
diff changeset
47 if (len(i.strip()) > self.minimum_length)
c861518b2a44 fix bug whereby forbidden characters cause issues
k0s <k0scist@gmail.com>
parents: 1
diff changeset
48 and not forbidden_characters.intersection(i) ]
0
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
49 random.shuffle(self.words)
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
50
3
b0ef5452a740 beginning of captcha checking
k0s <k0scist@gmail.com>
parents: 2
diff changeset
51 def check_captcha(self, request):
b0ef5452a740 beginning of captcha checking
k0s <k0scist@gmail.com>
parents: 2
diff changeset
52 captcha = request.POST.get('captcha', '').lower()
b0ef5452a740 beginning of captcha checking
k0s <k0scist@gmail.com>
parents: 2
diff changeset
53 key = request.POST.get('key')
b0ef5452a740 beginning of captcha checking
k0s <k0scist@gmail.com>
parents: 2
diff changeset
54 if not key: return False
b0ef5452a740 beginning of captcha checking
k0s <k0scist@gmail.com>
parents: 2
diff changeset
55 try:
b0ef5452a740 beginning of captcha checking
k0s <k0scist@gmail.com>
parents: 2
diff changeset
56 key = int(key)
b0ef5452a740 beginning of captcha checking
k0s <k0scist@gmail.com>
parents: 2
diff changeset
57 except ValueError:
b0ef5452a740 beginning of captcha checking
k0s <k0scist@gmail.com>
parents: 2
diff changeset
58 return False
b0ef5452a740 beginning of captcha checking
k0s <k0scist@gmail.com>
parents: 2
diff changeset
59 try:
b0ef5452a740 beginning of captcha checking
k0s <k0scist@gmail.com>
parents: 2
diff changeset
60 value = self.words[key]
b0ef5452a740 beginning of captcha checking
k0s <k0scist@gmail.com>
parents: 2
diff changeset
61 except IndexError:
b0ef5452a740 beginning of captcha checking
k0s <k0scist@gmail.com>
parents: 2
diff changeset
62 raise # TODO: better error handling
b0ef5452a740 beginning of captcha checking
k0s <k0scist@gmail.com>
parents: 2
diff changeset
63 return value == captcha
0
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
64
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
65 def __call__(self, environ, start_response):
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
66 request = Request(environ)
2
c861518b2a44 fix bug whereby forbidden characters cause issues
k0s <k0scist@gmail.com>
parents: 1
diff changeset
67 if request.method == 'POST' and not request.remote_user:
3
b0ef5452a740 beginning of captcha checking
k0s <k0scist@gmail.com>
parents: 2
diff changeset
68 return self.app(environ, start_response)
0
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
69
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
70 return LXMLMiddleware.__call__(self, environ, start_response)
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
71
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
72 def manipulate(self, environ, tree):
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
73 """manipulate the DOM; should return an etree._Element"""
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
74
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
75 request = Request(environ)
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
76
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
77 # don't use CAPTCHAs for authorized users
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
78 if request.remote_user:
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
79 return tree
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
80
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
81 for element in tree.findall(".//form[@method='post']"):
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
82 key = random.Random().randint(0, len(self.words))
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
83 word = self.words[key]
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
84 captcha = skimpyAPI.Pre(word).data()
3
b0ef5452a740 beginning of captcha checking
k0s <k0scist@gmail.com>
parents: 2
diff changeset
85 string = '<div class="captcha">%s<input type="hidden" name="key" value="%s"/><input type="text" name="captcha"/></div>' % (captcha, key)
0
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
86 addition = etree.fromstring(string)
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
87 insertion_point = element.find('.' + self.path)
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
88 insertion_point.addprevious(addition)
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
89
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
90 return tree
21ec6325ae0e initial import of CAPTCHA middleware; unfinished
k0s <k0scist@gmail.com>
parents:
diff changeset
91