The reality is that the ajax.php file simply needs to have some code put into it. I'm fine with hard-coding something.
Code:
if ($_POST['do'] == 'imagereg')
{
$vbulletin->input->clean_gpc('p', 'hash', TYPE_STR);
$xml = new vB_AJAX_XML_Builder($vbulletin, 'text/xml');
if ($vbulletin->options['hv_type'] == 'Image')
{
require_once(DIR . '/includes/class_humanverify.php');
$verify =& vB_HumanVerify::fetch_library($vbulletin);
$verify->delete_token($vbulletin->GPC['hash']);
$output = $verify->generate_token();
$xml->add_tag('hash', $output['hash']);
}
else
{
$xml->add_tag('error', fetch_error('humanverify_image_wronganswer'));
}
$xml->print_xml();
}
Anyone who hits this section of the file more than 5 times in a minute can go goodbye as far as I am concerned.