reCaptcha V2 Manual upgrade steps

jcanning · March 13, 2018, 12:38pm

Hey All,

I have a customer using OJS 2.4.8.1 and there is a lot of customizations where upgrading tot he latest version will take a fair amount of planning and time. I was just notified that reCaptcha v1 will stop working at the end of March.

Are there any steps or a list of files I need to update to get reCaptcha V2 updated? I found 3 files (recaptchalib.inc.php, notificationmailinglistform.inc.php and formvalidartorrecaptcha.inc.php) that i have updated to what appears to be the latest versions but it is not working.

If someone could throw out which files need to be replaced and where to get them that would be great.

Thanks,
jAC

asmecher · March 13, 2018, 4:14pm

Hi @jcanning,

See https://github.com/pkp/pkp-lib/issues/3425 – in particular the two pull requests tagged in that issue. One is for the OJS application repository, the other for the lib/pkp submodule.

Regards,
Alec Smecher
Public Knowledge Project Team

jcanning · March 13, 2018, 6:01pm

Hey Alec

Github messes me up with the pull requests so i am not sure which versions of the file i should be updating.

These are the two sets of pulls i am seeing, are these the ones i should be updating?

Thanks!

jcanning · March 13, 2018, 6:43pm

I replaced those 5 files mentioned in those 2 pulls but still have the old reCaptcha. I have got to be doing something wrong (clearly :)). Any thoughts?

asmecher · March 13, 2018, 7:54pm

Hi @jcanning,

I’ll tag @ctgraham, who wrote those PRs – Clinton, those two pull requests are all that’s required to get ReCaptcha V2 working in OJS 2.4.x, correct?

Regards,
Alec Smecher
Public Knowledge Project Team

ctgraham · March 14, 2018, 12:18pm

Did you also configure the values in config.inc.php?

github.com

pkp/ojs/blob/ojs-stable-2_4_8/config.TEMPLATE.inc.php#L432-L442


; Version of ReCaptcha to use: 0: Legacy (default), 2: ReCAPTCHA v2
recaptcha_version = 0


; Public key for reCaptcha (see http://www.google.com/recaptcha)
; recaptcha_public_key = your_public_key


; Private key for reCaptcha (see http://www.google.com/recaptcha)
; recaptcha_private_key = your_private_key


; Validate the hostname in the ReCaptcha v2 response
recaptcha_enforce_hostname = Off

The recaptcha_version setting will need to be changed to “2”, and you will probably need a new reCaptcha key pair, at the least.

jcanning · March 14, 2018, 11:21pm

That is exactly what i was missing
Thank you so much!

andrewdion04 · March 15, 2018, 4:29am

@jcanning can you explain where file and what code you add more detail?
I cannot find file classes/form/validation/FormValidatorReCaptcha.inc.php on OJS 2.4.8.1

ctgraham · March 15, 2018, 1:10pm

There are two different pulls, with two different bases: the OJS application, and the shared library (which lives under the OJS application in lib/pkp). The FormValidatorReCaptcha.inc.php file is in the shared library, so the full path is:
lib/pkp/classes/form/validation/FormValidatorReCaptcha.inc.php

jcanning · March 15, 2018, 1:50pm

Hi Andrew,

these are all the files i backed up and modified.

Replaced the following files with updated versions for the OJS website

/public_html/lib/pkp/classes/form/validation/FormValidatorReCaptcha.inc.php
/public_html/lib/pkp/classes/notification/form/NotificationMailingListForm.inc.php
Added: /public_html/lib/pkp/classes/notification/form/NotificationMailingListForm.inc.php.swp
****Not sure if this one was needed but put it there anyways
/public_html/classes/comment/form/CommentForm.inc.php
/public_html/classes/user/form/RegistrationForm.inc.php

File updated to include the option for reCaptcha v2
/html_public/Config.inc.php

Hope this helps.

Thanks,
jAC

ctgraham · March 16, 2018, 1:32pm

The .swp file is not needed and was removed in this subsequent commit:

Enzo · March 23, 2018, 9:41am

Great post. Very helpful.
Thanks

jcanning · March 26, 2018, 3:35pm

Hey All,

I ran into a small hiccup when a user tries to register now

Fatal error: Class ‘PKPString’ not found in /home/username/public_html/classes/user/form/RegistrationForm.inc.php on line 372

Any thoughts on why that might be barking (i mean i know it cannot find that class but it was a complete replacement of the file)?

Thanks,
jAC

asmecher · March 28, 2018, 12:48am

Hi @jcanning,

There’s a reference in classes/user/form/RegistrationForm.inc.php to the PKPString class, which should be to String in your version of OJS. You should be able to change that and it’ll work.

I’ll review whether the wrong name got committed to the stable codebase by accident and change it if needed.

Regards,
Alec Smecher
Public Knowledge Project Team

OSU_Libraries · March 30, 2018, 1:30pm

I’ve successfully installed recaptcha v2 on ojs2.4.8-1. Woo-hoo!

However, from some initial tests it seems that the recaptcha v2 form always validates with no checks. I’m just checking the I’m not a robot box and it passes.

OSU_Libraries · March 30, 2018, 1:37pm

Follow up:

I’ve tested on Chrome and Firefox: always passes.
Safari: works as expected.

drswagatam · June 30, 2018, 5:18pm

I have been trying to do this on my website bjohns.in but without success. Could you please help me? New users are not able to register as the recaptcha ver 1 has expired. Please help.

drswagatam · June 30, 2018, 5:25pm

I have been trying to do this on my website bjohns.in but without success. Could you please help me? New users are not able to register as the recaptcha ver 1 has expired. Please help.

ctgraham · July 2, 2018, 1:05pm

The most straightforward way to handle this is to do the standard upgrade to OJS 2.4.8-3, and then edit the config.inc.php settings with your new settings and keys. This will enable ReCAPTHA v2 for registrations and comments (notification mailing list subscriptions is broken).

To fix notifications mailing lists will take the patch described here:

Do you use ReCAPTCHA for notification mailing list subscriptions?

drswagatam · July 7, 2018, 4:55am

Thank you ctgraham. I updated with ssh patching to ojs 2.4.8.3 and then replaced the files in those two pull requests (the lib pkp files were the same, the class comment and registration form files were different probably) and it is working now.