note 80604 added to function.str-shuffle

From: Date: Thu, 24 Jan 2008 19:46:16 +0000
Subject: note 80604 added to function.str-shuffle
Groups: php.notes 
Request: Send a blank email to php-notes+get-135383@lists.php.net to get a copy of this message
Re: jojersztajner at OXYGEN dot POLAND "It may be useful if you want to create an accessible CAPTCHA." This is a flawed concept, since: 1) It's not really accessible -- your scrambled text would produce incomprehensible output if passed through a screen reader (just imagine what a computer saying "uinervtisy" would sound like) 2) It's in no way secure. A simple script with access to a copy of /usr/dict/words can reduce the space of possible solutions to no more than a handful. i.e., it's trivial for a script to generate a command like the following, which solves the "uinervtisy" example 100% of the time: php@server:~$ egrep -i '^u[inervts]{8}y$' /usr/share/dict/words university php@server:~$ Novel idea, but it would take a clever spammer all of 5 minutes to defeat it completely. ---- Server IP: 64.71.164.2 Probable Submitter: 64.81.57.203 ---- Manual Page -- http://www.php.net/manual/en/function.str-shuffle.php Edit -- https://master.php.net/note/edit/80604 Del: integrated -- https://master.php.net/note/delete/80604/integrated Del: useless -- https://master.php.net/note/delete/80604/useless Del: bad code -- https://master.php.net/note/delete/80604/bad+code Del: spam -- https://master.php.net/note/delete/80604/spam Del: non-english -- https://master.php.net/note/delete/80604/non-english Del: in docs -- https://master.php.net/note/delete/80604/in+docs Del: other reasons-- https://master.php.net/note/delete/80604 Reject -- https://master.php.net/note/reject/80604 Search -- https://master.php.net/manage/user-notes.php

« previous php.notes (#135383) next »