This file is indexed.

/usr/share/redmine/plugins/redmine_recaptcha/lib/account_controller_patch.rb is in redmine-plugin-recaptcha 0.1.0+git20121018-3.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
module AccountControllerPatch
  def self.included(base)
    base.send(:include, InstanceMethods)

    base.class_eval do
      alias_method_chain :register, :recaptcha_verification
    end
  end
  
  module InstanceMethods
    def register_with_recaptcha_verification
      redirect_to(home_url) && return unless Setting.self_registration? || session[:auth_source_registration]

      if request.get?
        session[:auth_source_registration] = nil
        @user = User.new(:language => Setting.default_language)
      else
        @user = User.new(params[:user])
        @user.admin = false
        @user.register
        if session[:auth_source_registration]
          @user.activate
          @user.login = session[:auth_source_registration][:login]
          @user.auth_source_id = session[:auth_source_registration][:auth_source_id]
          if @user.save
            session[:auth_source_registration] = nil
            self.logged_user = @user
            flash[:notice] = l(:notice_account_activated)
            redirect_to :controller => 'my', :action => 'account'
          end
        else
          @user.login = params[:user][:login]
          @user.password, @user.password_confirmation = params[:password], params[:password_confirmation]
          if verify_recaptcha( :private_key => Setting.plugin_redmine_recaptcha['recaptcha_private_key'], :model => @user, :message => "There was an error with the recaptcha code below. Please re-enter the code and click submit." )
            case Setting.self_registration
            when '1'
              register_by_email_activation(@user)
            when '3'
              register_automatically(@user)
            else
              register_manually_by_administrator(@user)
            end
          end
        end

        #the old method is accessible here:
        #register_without_recaptcha_verification
      end
    end
  end
end