Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
jquery-captcha
Advanced tools
BotDetect Captcha jQuery Plugin (BotDetect Captcha Simple API integration for all of the jQuery versions)
For a comprehensive step-by-step integration guide please see our jQuery Captcha Plugin Integration Guide.
The guide covers the integration with the following backends:
To give you a hint how jQuery Captcha Plugin works we pasted bellow a few, not necessary up-to-date (and mostly frontend related), excerpts from the Integration Guide.
npm install jquery-captcha --save
<script src="node_modules/jquery-captcha/dist/jquery-captcha.min.js"></script>
Endpoint configuration depends on which technology you use in the backend.
$(document).ready(function() {
// DOM ready
var captcha = $('#botdetect-captcha').captcha({
captchaEndpoint:
'https://your-app-backend-hostname.your-domain.com/simple-captcha-endpoint.ashx'
});
});
$(document).ready(function() {
// DOM ready
var captcha = $('#botdetect-captcha').captcha({
captchaEndpoint:
'https://your-app-backend-hostname.your-domain.com/simple-captcha-endpoint'
});
});
$(document).ready(function() {
// DOM ready
var captcha = $('#botdetect-captcha').captcha({
captchaEndpoint:
'https://your-app-backend-hostname.your-domain.com/botdetect-captcha-lib/simple-botdetect.php'
});
});
<div id="botdetect-captcha" data-captchastylename="yourFirstCaptchaStyle"></div>
<input id="yourFirstCaptchaUserInput" type="text"/>
$('#yourFormWithCaptcha').submit(function(event) {
// the user-entered captcha code value to be validated at the backend side
var userEnteredCaptchaCode = captcha.getUserEnteredCaptchaCode();
// the id of a captcha instance that the user tried to solve
var captchaId = captcha.getCaptchaId();
var postData = {
userEnteredCaptchaCode: userEnteredCaptchaCode,
captchaId: captchaId
};
// post the captcha data to the /your-app-backend-path on your backend
$.ajax({
method: 'POST',
url: 'https://your-app-backend-hostname.your-domain.com/your-app-backend-path',
dataType: 'json',
contentType: 'application/json; charset=utf-8',
data: JSON.stringify(postData),
success: function(response) {
if (response.success == false) {
// captcha validation failed; reload image
captcha.reloadImage();
// TODO: maybe display an error message, too
} else {
// TODO: captcha validation succeeded; proceed with your workflow
}
}
});
event.preventDefault();
});
The userEnteredCaptchaCode
and captchaId
values posted from the frontend are used to validate a captcha challenge on the backend.
The validation is performed by calling the: Validate(userEnteredCaptchaCode, captchaId)
.
// C#
SimpleCaptcha yourFirstCaptcha = new SimpleCaptcha();
bool isHuman = yourFirstCaptcha.Validate(userEnteredCaptchaCode, captchaId);
' VB.NET
Dim yourFirstCaptcha As SimpleCaptcha = New SimpleCaptcha()
Dim isHuman As Boolean = yourFirstCaptcha.Validate(userEnteredCaptchaCode, captchaId)
SimpleCaptcha yourFirstCaptcha = SimpleCaptcha.load(request);
boolean isHuman = yourFirstCaptcha.validate(userEnteredCaptchaCode, captchaId);
$yourFirstCaptcha = new SimpleCaptcha();
$isHuman = $yourFirstCaptcha->Validate($userEnteredCaptchaCode, $captchaId);
jQuery Captcha Plugin Step-by-step Integration Guide -- read this one first
jQuery Captcha Plugin Basic Example -- partial code walk-through
jQuery Captcha Plugin Form Example -- partial code walk-through
The current version of the jQuery Captcha Plugin requires one of the following BotDetect CAPTCHA backends:
Through contact form on captcha.com.
FAQs
BotDetect Captcha jQuery Plugin (BotDetect Captcha Simple API integration for all of the jQuery versions)
We found that jquery-captcha demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.