Closed (fixed)
Project:
CAPTCHA
Version:
5.x-3.x-dev
Component:
Code
Priority:
Critical
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
27 Feb 2007 at 02:31 UTC
Updated:
19 Sep 2007 at 09:41 UTC
After a user registers successfully (after validating captcha), the captcha challenge is not shown on the registration page again.
To further explain the problem, if right after submitting the registration form, one goes back to the user registration page, the captcha challenge does not show.
This vulnerability can be exploited by bots, after a successful human registration from the same machine.
Comments
Comment #1
robloachJust tested in 3.x and it works.
Comment #2
(not verified) commented