(I already suggested this in http://drupal.org/node/163538#comment-288721, but I thought it would be better to make a separate issue out of this.)

The idea is to drop the text_captcha as a submodule of the CAPTCHA module, because:

  • The problem with the current text captcha is that it is very easy for spammers to pass it: just answer with a random word of the phrase and you get 20% chance of success (with 5 words in the phrase).
  • I've already made a much more advanced version in the CAPTCHA Pack module (named Phrase CAPTCHA). Changes: additional selection criteria ("pick the alphabetical misplaced word", "pick the word that occurs two times"), usage of a radio buttons instead of a text field (which is user friendlier), localization for the user defined word pool, option to add extra radio options to make random guessing by spam bots harder, etc ...
  • Inside the CAPTCHA Pack, it's also easier to reuse/share code and functions (for example with the word list CAPTCHA).
  • I think it is a good idea to separate the base captcha module from particular captcha implementations in order to keep it better maintainable.
  • I created the text captcha submodule during my rewrite of the CAPTCHA module, but I'm not very happy with it: it looks silly, it's not very human friendly and it is easy to pass by spammers (see higher).
CommentFileSizeAuthor
#1 text_captcha_drop.png60.08 KBsoxofaan

Comments

soxofaan’s picture

soxofaan commented
StatusFileSize
new text_captcha_drop.png60.08 KB

As a reference: screenshot of admin page and challenge of the current "Phrase CAPTCHA" of CAPTCHA Pack, which would replace the text CAPTCHA of the base CAPTCHA module.

robloach’s picture

robloach
he/him
commented

We should keep Text Captcha as part of the Captcha module package because:

  • It acts as a good demonstration of how to use the Captcha API. When creating reCAPTCHA, I used a combination of the documentation (very poor at the time), and Text Captcha in order to use the new API effectively. One could easily create new Captcha challenges based on the Text Captcha quite effectively now.
  • Many websites, including drupal.org, already use Text Captcha and switching the namespace on them isn't really fun for them
  • If they're not satisfied with Text Captcha and it is letting in spam bots, they'll turn to another module, like Image Captcha, Captcha Pack, reCAPTCHA, or the Riddler
soxofaan’s picture

soxofaan commented
Version: 5.x-3.x-dev » 6.x-2.x-dev
wundo’s picture

wundo commented
Status: Active » Closed (won't fix)
soxofaan’s picture

soxofaan commented
Assigned: Unassigned » soxofaan
Status: Closed (won't fix) » Active

At drupalcon boston wundo and I agreed to drop text captcha for in the HEAD branch (compatible with drupal 6)

soxofaan’s picture

soxofaan commented
Status: Active » Fixed

text_captcha was not copied for the new experimental development for drupal 6 (http://drupal.org/cvs?commit=101454), so it does not have to be deleted ;)

robloach’s picture

robloach
he/him
commented

Any thoughts on moving Phrase CAPTCHA into core?

soxofaan’s picture

soxofaan commented

At drupalcon, wundo and I agreed to not put phrase CAPTCHA as a replacement for text CAPTCHA into core because:
* that way we can keep core small and better maintainable, but functional (math CAPTCHA and image CAPTCHA are still in core)
* I'm planning to merge phase CAPTCHA with word list CAPTCHA and lost character CAPTCHA into one module, I think it's better to do this outside CAPTCHA core.
* phrase CAPTCHA is broken for Drupal6 (because it uses a hidden feature from D5 that is removed from D6) and I don't have a solution yet

Anonymous’s picture

Anonymous (not verified) commented
Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.