From 1233d8ca6a9c886f898b7ca93d58e94d17c71fbd Mon Sep 17 00:00:00 2001
From: bernte <bernte@gmail.com>
Date: Mon, 23 Dec 2013 02:29:00 +0100
Subject: [PATCH] Update cryptographp.fct.php

added for validation:

alt="captcha" and alt="reload"
escaped & - symbol with &amp;

tested captcha complete by adding wrong letters.
i also made a password-reset succesfully for testing
---
 plugins/captcha/crypt/cryptographp.fct.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugins/captcha/crypt/cryptographp.fct.php b/plugins/captcha/crypt/cryptographp.fct.php
index c3fce1ca..aaf20795 100644
--- a/plugins/captcha/crypt/cryptographp.fct.php
+++ b/plugins/captcha/crypt/cryptographp.fct.php
@@ -9,9 +9,9 @@
  */
 function dsp_crypt($cfg = 0, $reload = 1)
 {
-    echo "<table><tr><td><img id='cryptogram' src='".$_SESSION['cryptdir']."/cryptographp.php?cfg=".$cfg."&".SID."'></td>";
-    if ($reload) echo "<td>&nbsp;&nbsp;<a title='".($reload==1?'':$reload)."' style=\"cursor:pointer\" onclick=\"javascript:document.images.cryptogram.src='".$_SESSION['cryptdir']."/cryptographp.php?cfg=".$cfg."&".SID."&'+Math.round(Math.random(0)*1000)+1\"><img src=\"".$_SESSION['cryptdir']."/images/reload.png\"></a></td>";
-    echo "</tr></table>";
+    echo '<table><tr><td><img id="cryptogram" src="'.$_SESSION['cryptdir'].'/cryptographp.php?cfg='.$cfg.'&amp;'.SID.'" alt="captcha"></td>';
+    if ($reload) echo '<td>&nbsp;&nbsp;<a title="'.($reload==1?'':$reload).'" style="cursor:pointer" onclick="javascript:document.images.cryptogram.src=\''.$_SESSION['cryptdir'].'/cryptographp.php?cfg='.$cfg.'&amp;'.SID.'&amp;\'+Math.round(Math.random(0)*1000)+1"><img src="'.$_SESSION['cryptdir'].'/images/reload.png" alt="reload"></a></td>';
+    echo '</tr></table>';
 }
 
 /**