note 98187 deleted from function.imagettftext by danbrown
| From: | danbrown@php.net | Date: | Tue, 01 Jun 2010 14:47:59 +0000 |
| Subject: | note 98187 deleted from function.imagettftext by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-169789@lists.php.net to get a copy of this message | ||
Note Submitter: php-net at txitcs dot com
----
@adam at worldwrestlingmania dot cjb dot net
That captcha is pointless to use as it has huge security flaws and can EASILY be automated.
Don't store the captcha values on the page in a hidden input form as bots can easily read the
HTML, pull the captcha, and bypass it thus making your captcha pointless.
Instead of that, put the captcha in an encrypted cookie or inside of a sessions table in your
database. Be sure to destroy the information after the attempt to pass the string to the captcha.