Test platform: Drupal 5.1 + captcha-5.x-1.x-dev + captcha-5.x-1.x-dev

"Captcha" type captcha working as expected.
"Textimage" type captcha is not.

Used for login:
-type user
-type password
-hit enter
-get the "Missing captcha" error message
-type ANY letters in the catcha field, or, better, just hit reload. You have just bypassed captcha test, you are logged in.

Enjoy :-))))

Comments

fluke’s picture

fluke commented

This happens to me also. It seems that even though the capture fails the first time, you are in fact logged in so it doesn't check login details the second time. It doesn't matter what username or password you use for the second time either.

fluke’s picture

fluke commented

The captcha works for other forms though, just not logins. I suspect it is something to do with the session handling (since a new session is generated for each login attempt) but i haven't figured it out yet.

heine’s picture

heine commented

Core login validation actually logs a user in during the form validation stage. While by design, that means that no other module can prevent a user from logging in.

Best to remove this captcha point.

heine’s picture

heine commented

Core login validation actually logs a user in during the form validation stage. While by design, that means that no other module can prevent a user from logging in.

Best to remove this captcha point.

danielb’s picture

danielb commented

Indeed by design there are a lot of things in drupal you cannot intervene with a module.... the whole thing needs a bit of a rethink imo

deciphered’s picture

deciphered
Primary language English
Location Ballarat, Victoria, Australia
commented
Status: Active » Closed (fixed)

Captcha is no longer supported in Textimage.