更新

assets/js/joe.global.js

@@ -359,9 +359,18 @@ document.addEventListener('DOMContentLoaded', () => {
 			const parent = $('.joe_comment__respond-form').attr('data-coid');
 			const author = $(".joe_comment__respond-form .head input[name='author']").val();
 			const mail = $(".joe_comment__respond-form .head input[name='mail']").val();
+			/*  -- 验证码 -- */
+			const num1 = $(".joe_comment__respond-form .head input[name='num1']").val();
+			const num2 = $(".joe_comment__respond-form .head input[name='num2']").val();
+			const sum = $(".joe_comment__respond-form .head input[name='sum']").val();
+			/* -- 验证码 -- */
 			let text = $(".joe_comment__respond-form .body textarea[name='text']").val();
 			if (author.trim() === '') return Qmsg.info('请输入昵称！');
 			if (!/\w+([-+.]\w+)*@\w+([-.]\w+)*\.\w+([-.]\w+)*/.test(mail)) return Qmsg.info('请输入正确的邮箱！');
+			/* -- 验证码前端校验 -- */
+			if (sum.trim() === '') return Qmsg.info('请输入计算结果！');
+			if (Number(num1) + Number(num2) !== Number(sum)) return Qmsg.info('计算结果有误，请检查！');
+			/* -- 验证码前端校验 -- */
 			if (type === 'text' && text.trim() === '') return Qmsg.info('请输入评论内容！');
 			if (type === 'draw') {
 				const txt = $('#joe_comment_draw')[0].toDataURL('image/webp', 0.1);
@@ -373,7 +382,7 @@ document.addEventListener('DOMContentLoaded', () => {
 			$.ajax({
 				url,
 				type: 'POST',
-				data: { author, mail, text, parent },
+				data: { author, mail, text, parent, num1, num2, sum },
 				dataType: 'text',
 				success(res) {
 					let arr = [],

core/factory.php

@@ -6,6 +6,12 @@ class Intercept
 {
     public static function message($comment)
     {
+        /* 校验验证码是否正确 */
+        $num1 = (int)Typecho_Request::getInstance()->num1;
+        $num2 = (int)Typecho_Request::getInstance()->num2;
+        $sum = (int)Typecho_Request::getInstance()->sum;
+        if ($num1 + $num2 !== $sum) throw new Typecho_Widget_Exception('计算结果有误，请检查！', 403);
+
         /* 用户输入内容画图模式 */
         if (preg_match('/\{!\{(.*)\}!\}/', $comment['text'], $matches)) {
             /* 如果判断是否有双引号，如果有双引号，则禁止评论 */

core/function.php

@@ -2,7 +2,7 @@
 /* 获取主题当前版本号 */
 function _getVersion()
 {
-	return "6.8.6";
+	return "6.8.7";
 };
 
 /* 判断是否是手机 */

package.json

@@ -1,6 +1,6 @@
 {
 	"name": "typecho-joe-next",
-	"version": "6.8.6",
+	"version": "6.8.7",
 	"description": "A Theme Of Typecho",
 	"main": "index.php",
 	"keywords": [

public/comment.php

@@ -26,7 +26,13 @@
                             <input type="text" value="<?php $this->user->hasLogin() ? $this->user->mail() : $this->remember('mail') ?>" autocomplete="off" name="mail" placeholder="请输入邮箱..." />
                         </div>
                         <div class="list">
-                            <input type="text" value="<?php $this->remember('url'); ?>" autocomplete="off" name="url" placeholder="（选填）请输入网址..." />
+                            <?php
+                            $num1 = rand(1, 10);
+                            $num2 = rand(1, 10);
+                            ?>
+                            <input type="hidden" name="num1" value="<?php echo $num1 ?>">
+                            <input type="hidden" name="num2" value="<?php echo $num2 ?>">
+                            <input type="text" autocomplete="off" name="sum" placeholder="计算：<?php echo $num1 ?> + <?php echo $num2 ?> = ?" />
                         </div>
                     </div>
                     <div class="body">