note 80604 added to function.str-shuffle
| From: | merreborn at mailinator dot com | Date: | Thu, 24 Jan 2008 19:46:16 +0000 |
| Subject: | note 80604 added to function.str-shuffle | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-135383@lists.php.net to get a copy of this message | ||
Re: jojersztajner at OXYGEN dot POLAND
"It may be useful if you want to create an accessible CAPTCHA."
This is a flawed concept, since:
1) It's not really accessible -- your scrambled text would produce incomprehensible output if
passed through a screen reader (just imagine what a computer saying "uinervtisy" would
sound like)
2) It's in no way secure. A simple script with access to a copy of /usr/dict/words can reduce
the space of possible solutions to no more than a handful.
i.e., it's trivial for a script to generate a command like the following, which solves the
"uinervtisy" example 100% of the time:
php@server:~$ egrep -i '^u[inervts]{8}y$' /usr/share/dict/words
university
php@server:~$
Novel idea, but it would take a clever spammer all of 5 minutes to defeat it completely.
----
Server IP: 64.71.164.2
Probable Submitter: 64.81.57.203
----
Manual Page -- http://www.php.net/manual/en/function.str-shuffle.php
Edit -- https://master.php.net/note/edit/80604
Del: integrated -- https://master.php.net/note/delete/80604/integrated
Del: useless -- https://master.php.net/note/delete/80604/useless
Del: bad code -- https://master.php.net/note/delete/80604/bad+code
Del: spam -- https://master.php.net/note/delete/80604/spam
Del: non-english -- https://master.php.net/note/delete/80604/non-english
Del: in docs -- https://master.php.net/note/delete/80604/in+docs
Del: other reasons-- https://master.php.net/note/delete/80604
Reject -- https://master.php.net/note/reject/80604
Search -- https://master.php.net/manage/user-notes.php