Version 3.4.6

upload/ips_kernel/classCaptchaPlugin/recaptcha.php

@@ -47,11 +47,11 @@ define("RECAPTCHA_VERIFY_SERVER", "http://www.google.com");
  *~TERABYTE_DOC_READY~
  * $Copyright: (c) 2001 - 2011 Invision Power Services, Inc.$
  * $License: http://www.invisionpower.com/company/standards.php#license$
- * $Author: mark $
+ * $Author: rashbrook $
  * @since		Friday 19th May 2006 17:33
- * $LastChangedDate: 2013-02-11 12:32:07 -0500 (Mon, 11 Feb 2013) $
- * @version		v3.4.5
- * $Revision: 11975 $
+ * $LastChangedDate: 2013-10-16 19:11:24 -0400 (Wed, 16 Oct 2013) $
+ * @version		v3.4.6
+ * $Revision: 12381 $
  */
 
 /**
@@ -158,9 +158,9 @@ class captchaPlugin
 												};
 					</script>";
 
-		$html	.= '<script type="text/javascript" src="'. $server . '/challenge?k=' . $this->public_key . '"></script>
+		$html	.= '<script type="text/javascript" src="'. $server . '/challenge?k=' . $this->public_key . '&hl=' . $this->settings['recaptcha_language'] . '"></script>
 					<noscript>
-					<iframe src="'. $server . '/noscript?k=' . $this->public_key . '" height="300" width="500" frameborder="0"></iframe><br/>
+					<iframe src="'. $server . '/noscript?k=' . $this->public_key . '&hl=' . $this->settings['recaptcha_language'] . '" height="300" width="500" frameborder="0"></iframe><br/>
 					<textarea name="recaptcha_challenge_field" rows="3" cols="40"></textarea>
 					<input type="hidden" name="recaptcha_response_field" value="manual_challenge"/>
 					</noscript>';
@@ -192,7 +192,15 @@ class captchaPlugin
 		
 		$captcha_unique_id	= $_REQUEST['recaptcha_challenge_field'];
 		$captcha_input		= $_REQUEST['recaptcha_response_field'];
-
+		
+		//-----------------------------------------
+		// Path disclosure prevention
+		//-----------------------------------------
+		if ( is_array( $captcha_input ) )
+		{
+			return false;
+		}
+		
 		if ( $captcha_input == null || strlen($captcha_input) == 0 || $captcha_unique_id == null || strlen($captcha_unique_id) == 0) 
 		{
 			return false;