Implement the verification code method during PHP Development

Article title: implement the verification code method during PHP development. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.
I read some articles about the verification code some time ago, that is, to generate an image with a string of randomly generated numbers or symbols, and add some interference pixels to the image to prevent OCR ), the user can identify the verification code information with the naked eye, and enter a form to submit the website for verification. a function can be used only after the verification is successful.

An article briefly introduces the implementation method as follows:

Code 1:

/*

* Filename: authpage. php

* Author: huuworm

* Date: 2003-04-28

* @ Copyleft huuworm.org

*/

Srand (double) microtime () * 1000000 );

// Verify that the user input is consistent with the verification code

If (isset ($ HTTP_POST_VARS ['authinput'])

{

If (strcmp ($ HTTP_POST_VARS ['authnum'], $ HTTP_POST_VARS ['authinput']) = 0)

Echo "verification successful! ";

Else

Echo "verification failed! ";

}

// Generate a new four-digit integer verification code

While ($ authnum = rand () % 10000) <1000 );

?>

Code 2:

/*

* Filename: authimg. php

* Author: huuworm

* Date: 2003-04-28

* @ Copyleft huuworm.org

*/

// Generate a verification code Image

Header ("Content-type: image/PNG ");

Srand (double) microtime () * 1000000 );

$ Im = imagecreate (58,28 );

$ Black = ImageColorAllocate ($ im, 0, 0 );

$ White = ImageColorAllocate ($ im, 255,255,255 );

$ Gray = ImageColorAllocate ($ im, 200,200,200 );

Imagefill ($ im, 68, 30, $ gray );

// Print the four-digit integer verification code into the image

Imagestring ($ im, 5, 10, 8, $ HTTP_GET_VARS ['authnum'], $ black );

For ($ I = 0; $ I <50; $ I ++) // add interference pixels

{

Imagesetpixel ($ im, rand () % 70, rand () % 30, $ black );

}

ImagePNG ($ im );

ImageDestroy ($ im );

???>

This program has basically implemented the verification code generation and verification function, but the author of this article does not know why the content of the verification code is displayed in the form. in this case, it only limits the user's need to enter the verification code, but does not prevent malicious programs. It can be said that it is difficult to protect people, rather than prevent attacks.

However, we can save the verification string in the session according to the original author's idea, so as to ensure security.

The code is as follows:

// File: authform. php