Skip to content

[5.0] Remove outdated captcha for new installation#41530

Merged
HLeithner merged 7 commits intojoomla:5.0-devfrom
Fedik:captcha-remove
Sep 2, 2023
Merged

[5.0] Remove outdated captcha for new installation#41530
HLeithner merged 7 commits intojoomla:5.0-devfrom
Fedik:captcha-remove

Conversation

@Fedik
Copy link
Copy Markdown
Member

@Fedik Fedik commented Aug 30, 2023

Pull Request for Issue #39909 .

Summary of Changes

Remove outdated captcha from core.
This still will keep the invisible captcha for existing installations, and uninstall old recaptcha.

Testing Instructions

Do new installation.
Try update from 4.4.

Actual result BEFORE applying this Pull Request

Old Cpatcha still there.

Expected result AFTER applying this Pull Request

Do new installation: no captcha
Try update from 4.4: Invisible cpatcha still there, and old recaptcha is uninstalled

Link to documentations

Please select:

  • Documentation link for docs.joomla.org:
  • No documentation changes for docs.joomla.org needed
  • Pull Request link for manual.joomla.org: Recaptcha plugins Manual#182 Someone have to write a good explanation, and what to do for Users.
  • No documentation changes for manual.joomla.org needed

@Fedik Fedik mentioned this pull request Aug 30, 2023
@joomla-cms-bot joomla-cms-bot added Language Change This is for Translators PR-5.0-dev labels Aug 30, 2023
@wilsonge
Copy link
Copy Markdown
Contributor

OK I don't get the original issue. I could understand (kinda) standardizing on one of the captcha implementations (I guess invisible) but I really don't understand why we are removing invisible? It's not deprecated by google as far as I can tell so what's the issue?

@Fedik
Copy link
Copy Markdown
Member Author

Fedik commented Aug 30, 2023

I really don't understand why we are removing invisible?

We can keep it. As you guys decide. For me no difference.

Invisible captcha is not deprecated but it is outdated and pretty useless against spam, there already recaptcha v3.

upd: Presonaly I think Joomla should provide a captcha, no matter if it will be 3rd service or own image-generated.

@brianteeman
Copy link
Copy Markdown
Contributor

previously I had opened an issue for this #39909 but I closed it yesterday after 6 months with no interest.

PS v3 is a different thing to v2 and invisible and not a direct replacement

@richard67
Copy link
Copy Markdown
Member

richard67 commented Aug 30, 2023

@Fedik For really uninstalling an extension tt does not need the update SQL scripts for unlocking the extensions. We have a method for that in script.php:

https://github.com/joomla/joomla-cms/blob/5.0-dev/administrator/components/com_admin/script.php#L214

You just have to add the extension to be uninstalled to this array:

https://github.com/joomla/joomla-cms/blob/5.0-dev/administrator/components/com_admin/script.php#L221-L234

That's all. The extension will be unlocked and uninstalled.

Would be the right thing to do with the (visible) recaptcha. It should the also be removed from the list of core extensions in the ExtensionsHelper.

The invisible one we could handle like you propose with this PR.

@rdeutz
Copy link
Copy Markdown
Contributor

rdeutz commented Aug 30, 2023

We discussed it in todays maintainers meeting and decided: We remove it for new installations, unlock it and deinstall the not working one.

@brianteeman
Copy link
Copy Markdown
Contributor

if only the maintainers published reports then interested parties would have a clue wha\t was going on :(

@Fedik
Copy link
Copy Markdown
Member Author

Fedik commented Aug 31, 2023

I have updated the PR, recaptcha is uninstalled, and invisible one is unlocked

@HLeithner
Copy link
Copy Markdown
Member

if only the maintainers published reports then interested parties would have a clue wha\t was going on :(

The issue get my attention because you closed it and got into my inbox. it's hard to review 800 open issues for a release. So it was simple luck that it triggered my attention.

Co-authored-by: Richard Fath <richard67@users.noreply.github.com>
@brianteeman
Copy link
Copy Markdown
Contributor

What happens if a site is using recaptcha? Is it still uninstalled?

Should an update server not be added for the remaining captcha? Otherwise if there was a security issue with it we wouldn't be able to resolve it.

Should there be a conditional post installation message?

@Fedik
Copy link
Copy Markdown
Member Author

Fedik commented Aug 31, 2023

What happens if a site is using recaptcha? Is it still uninstalled?

Yes

Should an update server not be added for the remaining captcha?

This captcha also should be removed/replaced.
Someone have to write a good explanation, and what to do for Users.

Should there be a conditional post installation message?

If someone write it, I try to add it to the PR.

@HLeithner
Copy link
Copy Markdown
Member

We would need a "What's new in joomla 5.0" splash screen after upgrade like other software has but nobody wrote it yet.

Postinstallation messages are not the coolest thing tbh. but better then nothing

@brianteeman
Copy link
Copy Markdown
Contributor

I'm confused. Fedik says both should be removed but I read that Robert says just one of them

@Fedik
Copy link
Copy Markdown
Member Author

Fedik commented Aug 31, 2023

Fedik says both should be removed but I read that Robert says just one of them

It not conflicting. The invisible captcha will stay after update.

What I mean, it should be replaced by User to better captcha, because it is useles against spam.

# Conflicts:
#	plugins/captcha/recaptcha_invisible/src/Extension/InvisibleReCaptcha.php
#	tests/Unit/Plugin/Captcha/InvisibleRecaptcha/Extension/InvisibleRecaptchaPluginTest.php
@HLeithner HLeithner merged commit 5e33c77 into joomla:5.0-dev Sep 2, 2023
@HLeithner
Copy link
Copy Markdown
Member

thanks, could you please add this to the migration documentation, thanks.

@HLeithner HLeithner added this to the Joomla! 5.0 milestone Sep 2, 2023
@Fedik
Copy link
Copy Markdown
Member Author

Fedik commented Sep 2, 2023

There it is joomla/Manual#182

Kostelano added a commit to JPathRu/localisation that referenced this pull request Nov 2, 2023
Kostelano added a commit to JPathRu/localisation that referenced this pull request Nov 2, 2023
Kostelano added a commit to JPathRu/localisation that referenced this pull request Nov 2, 2023
Kostelano added a commit to Joomla-Ukraine/uk-UA that referenced this pull request Nov 4, 2023
Kostelano added a commit to Joomla-Ukraine/uk-UA that referenced this pull request Nov 4, 2023
Kostelano added a commit to Joomla-Ukraine/uk-UA that referenced this pull request Nov 4, 2023
Kostelano added a commit to Joomla-Ukraine/uk-UA that referenced this pull request Nov 4, 2023
@uzielweb
Copy link
Copy Markdown

Ok, guys. but WHY I have no one captcha as default now????????????

brianteeman added a commit to brianteeman/joomla-cms that referenced this pull request Oct 17, 2024
 joomla#41530 Remove outdated captcha for new installation

This completes that pr by removing the google library and plugin js and css

Signed-off-by: BrianTeeman <brian@teeman.net>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants