I have installed the Captcha 2.2 plugin. The image is not showing in the frontend or the backend. Instead I get the text, "Image with security code embedded in it". The URL for that is:

[code:1]/components/com_comprofiler/plugin/user/plug_cbcaptcha/captchaindex.php?urlmode=image&captchasid=GlO6oyIX3v446pTGdnUD5tCQRQLYeimy[/code:1]

If I try to visit that URL I get the following warning:

[code:1]Warning: mysql_connect() [function.mysql-connect]: Access denied for user 'mydbuser'@'localhost' (using password: NO) in /home/myserver/public_html/administrator/components/com_comprofiler/library/cb/cb.session.php on line 87
Session connect error![/code:1]

I have checked cb.session.php and line 41 is as it should be:

[code:1] array_unshift ($check, &$_SESSION);[/code:1]

Running PHP 5.2.6 and mySQL 5.0.45 with fastCGI, Joomla 1.0.15

Does it matter where the Session save path for Joomla is located? Any clues?

Thanks!

Post edited by: undoIT, at: 2008/06/11 10:25

Okay. figured out what is going on here. as an added security measure i store the configuration.php file in a private folder and call from it using a php include. cb.session.php was trying to read the replaced configuration.php file for the db settings. i just set the path to the moved config file and now the image works. in case any body is wonder, this is the line that needed to be changed in cb.session.php

/administrator/components/com_comprofiler/library/cb/cb.session.php line 87 [code:1]$config = file_get_contents( dirname( __FILE__ ) . '/../../../../../configuration.php' );[/code:1]

Post edited by: undoIT, at: 2008/06/11 10:32

I just removed the & before $_SESSION); in 41 and this worked for me.

Editing cb.session.php to remove the ampersand worked for me also. Good spot Rich.

Bryn

And for me too - after hours of thinking I'd done something wrong. Thank you.

Just upgraded to CB 1.2 RC2 with captcha 2.2 rc2 with similar security precautions... ie configuration.php elsewhere and only solution was to change cb.session.php as did undoIT. This is a hard-coded solution which means I need to change this every time I copy/move this installation-perhaps not a big deal but just curious, why didn't the include of an included file work as per joomla security recommendations ?