Page MenuHomePhabricator

"Incorrect or missing confirmation code." message for incorrect captcha could do with rewording
Closed, ResolvedPublic

Description

Author: Thehelpfulonewiki

Description:
If I enter a Captcha incorrectly on the new interface (and possibly the old one) I get a red box with the message "Incorrect or missing confirmation code." However, on the actual interface at https://en.wikipedia.org/w/index.php?title=Special:UserLogin&type=signup&returnto=Main+Page&useNew=1 I'm told it's a "security check" - so a new user may not understand what the confirmation code actually is. They may even get confused and think that they've entered the confirmation password incorrectly.

Can we reword this to "Incorrect or missing security code" or "Failed security check" (the latter sounds a bit too discouraging for me though).


Version: unspecified
Severity: enhancement

Details

Reference
bz47689

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 22 2014, 1:39 AM
bzimport set Reference to bz47689.

(In reply to comment #0)

Can we reword this to "Incorrect or missing security code" or "Failed
security check" (the latter sounds a bit too discouraging for me though).

How about "Incorrect or missing CAPTCHA"? I think the term is well-known by now, and the trademark claim by Carnegie Melon was abandoned:

http://tsdr.uspto.gov/#caseNumber=78500434&caseType=SERIAL_NO&searchType=statusSearch

Thehelpfulonewiki wrote:

(In reply to comment #1)

(In reply to comment #0)

Can we reword this to "Incorrect or missing security code" or "Failed
security check" (the latter sounds a bit too discouraging for me though).

How about "Incorrect or missing CAPTCHA"? I think the term is well-known by
now, and the trademark claim by Carnegie Melon was abandoned:

http://tsdr.uspto.gov/
#caseNumber=78500434&caseType=SERIAL_NO&searchType=statusSearch

Sure that works for me.

I'm not really certain how well-known CAPTCHA is. Some non-technical people know it, but I don't know how many.

The most important thing is consistency.

I would like to prepare a patch for this bug. Please assign it to me.

Created attachment 13751
Changed the error message "Incorrect or missing confirmation code."

Changed the error message "Incorrect or missing confirmation code."
to "Incorrect or missing confirmation CAPTCHA."

Attached:

I'd recommend splitting into two messages: one for a missing code (no input) and another for invalid input (some input, just not a match). I'd also recommend doing this with AJAX, if possible and it's not already implemented.

I cannot find the captcha in the latest mediawiki core. Is it removed by default? or added to an extension ?

CAPTCHA is in the ConfirmEdit extension.

(In reply to comment #10)

CAPTCHA is in the ConfirmEdit extension.

Though there is some CAPTCHA-related formatting code in the signup part of core, including the 'security check' message ('createacct-captcha').

(In reply to comment #11)

(In reply to comment #10)
Though there is some CAPTCHA-related formatting code in the signup part of
core, including the 'security check' message ('createacct-captcha').

but is it still there in the signup part ? I dont seem to get any captcha when I try 'Create Account' or 'Log in'.
but its there in resources/mediawiki.special/mediawiki.special.createAccount.js though.

Yes. You need to have ConfirmEdit installed (https://www.mediawiki.org/wiki/Extension:ConfirmEdit) and configured.

Wikimedia uses FancyCaptcha; however, there are others you can test with. To configure FancyCaptcha, see https://www.mediawiki.org/wiki/Extension:ConfirmEdit#FancyCaptcha .

When it's installed and configured, the signup CAPTCHA should be enabled by default (there is also a 'badlogin' CAPTCHA, that should show after 3 failed attempts, again on by default).

Change 102623 had a related patch set uploaded by 01tonythomas:
Reworded 'Incorrect or missing confirmation code' CAPTCHA message

https://gerrit.wikimedia.org/r/102623

Change 102623 merged by jenkins-bot:
Reworded 'Incorrect or missing confirmation code' CAPTCHA message

https://gerrit.wikimedia.org/r/102623