Hi,

I've noticed that the captcha pass phrase is essentially ignored. Doesn't matter if the phrase is graphical or maths the behavior on my site is like this:

- Put no response in - you get a warning to say this field must be completed. Great that's ok
- Put any old response you like in - any letters/ numbers of any length and the response is accepted as correct.

I've tried 6.x-1.0-rc2 and that works fine.

CommentFileSizeAuthor
#4 367959_captcha_validate_handler_not_found.patch6.99 KBsoxofaan

Comments

soxofaan’s picture

soxofaan commented
Status: Active » Postponed (maintainer needs more info)

I can't reproduce your problem with 6.x-2.x-dev or (the freshly released) 6.x-2.0-beta2

can you give more info about your setup: browser, platform, webserver, cookies enabled?, javascript enabled?, etc

doomritual’s picture

doomritual commented

6.x-2.0-beta2?????

I was referring to beta1 which I downloaded and was testing over the last week. Let me try beta2 and I'll get back to you.

doomritual’s picture

doomritual commented

ok I get the same for beta-2.

Here are the steps I took.

Deinstall all trace of captcha, remove from modules directory. Check in mysql for captcha tables - gone.

Add module and activate, use maths and add a captcha to forum. I did this in firefox 3.0.5.

I then start up opera 9.51 and galeon 2.0.6 (don't ask me about IE - I only work in linux). Clear the cache in each browser to be sure I'm not picking up any stale cached info. Then as guest add a new forum topic. Captcha challenge is present and forces me to answer a maths question 10+2. I enter the value ss. That's right - two s's. Forum topic is successfully created.

(when I made my original post I was also observing this with firefox as well as the other two browsers. Not tested firefox today)

I'm using drupal 6.9

I've tested this with my dev env which is linux Ubuntu 8.10 and Xampp version 1.6.5.a - this gives php 5.2.5, mysql 5.0.51, apache 2.2.6.

I've also tested on my live site (I don't get many hits but still got half a dozen spams filling my forum while captcha was on!!!)

Live site software is:
apache 2.2.10
php 5.2.8
mysql 5.0.67
os: linux (not sure what version my host uses)

cookies and javascript enabled

Finally I'm using straight out of the box drupal forum, no other modules bolted onto it.

I'm now using captcha 6.x-1.0-rc2 which works great so this isn't a major issue for me right now, but happy to help resolve this in any way I can if you think it might be a bug.

soxofaan’s picture

soxofaan commented
Title: Captcha pass phrase response ignored » Captcha pass phrase response ignored on cached forms
Version: 6.x-2.0-beta1 » 6.x-2.x-dev
Component: Captcha API (captcha) » Code
Status: Postponed (maintainer needs more info) » Needs review
StatusFileSize
new 367959_captcha_validate_handler_not_found.patch6.99 KB

Ok, I can reproduce it,
key is that the CAPTCHA is placed on a node form (such as the forum topic form)
I only tried with the comment form, which does not suffer from the problem.

Cause: the validate handler captcha_validate() is defined in an include file (captcha.pages.inc), which is loaded as necessary by captcha_form_alter(), but in case of node forms, the form is cached (as far as I know) and captcha_form_alter() does not run on validation, so the validation handler can not be found, which fails silently.

attached patch should solve the issue

doomritual’s picture

doomritual commented

Hi,

I can confirm that the patch seems to fix the issue.

Thanks for your help

soxofaan’s picture

soxofaan commented
Status: Needs review » Fixed

fixed by http://drupal.org/cvs?commit=169598

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.