Releases for CAPTCHA

Changes since 7.x-1.0-beta1:

Note about upgrading

In case you already using CAPTCHA 7.x-1.0-alpha2: the upgrade should be seamless.

In case you already tried/worked with CAPTCHA 7.x-1.0-alpha1: there is no upgrade path from 7.x-1.0-alpha1 and 7.x-1.0-alpha3. If you try to upgrade, you will get database errors. Instead, you should first uninstall the CAPTCHA module and reinstall 7.x-1.0-alpha3 (like a fresh install).

When upgrading from CAPTCHA 6.x-2.x (for Drupal 6), it is required to first upgrade to CAPTCHA 6.x-2.4 (or higher within the 6.x-2.x branch) first, otherwise the upgrade will fail (issues #1021244: Prevent upgrading directly from 6.x-2.3 (or earlier) to 7.x-1.x).

Changes since 7.x-1.0-alpha2:

• #976436 by matheusgorino, soxofaan: Adds an ob_end_clean to prevent the output image from being corrupted.
• #1024370 by soxofaan, nineLemon, Pancho, slashrsm: Prevents CAPTCHA from failing in certain forms
• fixing captcha.js identation
• Removing translation directories
• Stripping CVS keywords
• #881156 by elachlan and soxofaan: disable autocomplete on CAPTCHA response field with javascript (instead of with non-standard markup)
• #1049482 by jweowu: fix for schema mismatch

The Happy 2011 release

Yet a step closer to getting this module properly ported to Drupal 7.

Note about upgrading

In case you already tried/worked with CAPTCHA 7.x-1.0-alpha1: there is no upgrade path from 7.x-1.0-alpha1 and 7.x-1.0-alpha2. If you try to upgrade, you will get database errors. Instead, you should first uninstall the CAPTCHA module and reinstall 7.x-1.0-alpha2 (like a fresh install).

When upgrading from CAPTCHA 6.x-2.x (for Drupal 6), it is required to first upgrade to CAPTCHA 6.x-2.4 (or higher within the 6.x-2.x branch) first, otherwise the upgrade will fail (issues #1021244: Prevent upgrading directly from 6.x-2.3 (or earlier) to 7.x-1.x and #1040324: Install / Update Modules results in AJAX HTTP error do to db_add_column() call ).

Changes since DRUPAL-7--1-0-ALPHA1:

• #983254: fixed simple math fall back for image captcha in maintenance mode
• #978530 by elachlan and soxofaan: added image CAPTCHA dimensions to markup
• #810534: protection against CAPTCHA session reuse attacks, port of http://drupal.org/node/810534#comment-3158926, http://drupal.org/node/995748 and http://drupal.org/node/844148
• fixed/ported theme_captcha()
• various refactoring things to synchronize captcha.test for D6 and D7
• ported tests for CAPTCHA point administration

Fix for Session reuse hack

This release includes the fix for an important bug (#810534: Fix CAPTCHA session reuse), which made it possible to reuse CAPTCHA sessions and lowered the barrier to entry for spam bots. The fix is a rather big change, including a database change, so do not forget to run the update.php script.

For more info: also see the release notes for CAPTCHA 6.x-2.3-RC1 and CAPTCHA 6.x-2.3-RC2.

Minor changes since DRUPAL-6--2-3-RC2:

• typo in German translation (reported by GraemeB)
• #766190: Added button to admin page to clear the CAPTCHA placement cache
• added a touch of extra sanitizing of raw posted data
• #881156 by vivekkhurana: disable autocompletion on CAPTCHA response fields
• #780206: Add warning to Performance settings page about CAPTCHA and caching
• #780206: added warning during installation about page caching and CAPTCHA

All changes since DRUPAL-6--2-2:

Major:

• #810534 by soxofaan: fixed CAPTCHA session reuse hack

Why is this release a RC (release candidate)?

This release includes the fix for an important bug (#810534: Fix CAPTCHA session reuse), which made it possible to reuse CAPTCHA sessions and lowered the barrier to entry for spam bots. The fix is a rather big change, including a database change, so do not forget to run the update.php script.
Because the change is rather big, I wanted to be sure the fix didn't break a lot of other things. In the first place, I provided simpletest coverage for the bug, albeit limited to the CAPTCHA protection of some Drupal core forms (login form, comment form and node form). However, I wanted also some manual testing on real world sites and use cases, but I got only one (positive) response in #810534: Fix CAPTCHA session reuse.
To avoid that the lack of manual testing would block the commit of the fix, I decided to commit it and release the fixed version as a release candidate for 6-x.2.3. This way there is more real world testing, while still making it clear that the release could still have some issues. If you want stability and don't trust release candidate: stay at CAPTCHA 6.x-2.2. On the other hand, in terms of simple test coverage, CAPTCHA 6.x-2.3-RC1 could be considered more stable than CAPTCHA 6.x-2.2 as the coverage has increased.

Important changes since DRUPAL-6--2-2:

Changes since DRUPAL-6--2-1:

A new year, a new release from the CAPTCHA 6.x-2.x branch. Changes since previous release (6.x-2.0):

This release is intended to be the last release candidate before a final CAPTCHA 6.x-2.0 version.

Feature-wise, the goals of CAPTCHA 6.x-2.0 are completed and there are no critical or outstanding bug reports left. However, I decided not to go for a final 6.x-2.0 version because of the following.
This 6.x-2.0-RC3 release is the milestone where the CAPTCHA 6.x-2.x branch becomes the recommended branch for Drupal 6 and the 6.x-1.x branch becomes deprecated (it was already unmaintained for many moons). Switching the "recommendedness" on a release candidate is mainly to increase usage of the 6.x-2.x branch (which is now roughly at 5000) at the expense of the 6.x-1.x branch (which is now roughly at 22000), collecting more feedback and possibly work out some more kinks before the final CAPTCHA 6.x-2.0 version.

Changes since DRUPAL-6--2-0-BETA5:

Changes since DRUPAL-6--2-0-BETA3:

• implemented admin mode CAPTCHAs (presolved and no validation)
• added simpletest file captcha.test and removed old version of simpletest file
• renamed _captcha_update_captcha_point() to captcha_set_form_id_setting().
• #384814: better checking of TTF support
• removed the double vision feature, which was not very usefull.
• made noise level more fine grained
• various refactoring and code cleanups

Changes since DRUPAL-6--2-0-BETA1:

• #354520 by Anselm Heaton: SQL syntax error
• minor UI tweak: added more descripitive title to collapsible CAPTCHA admin fieldset
• #356407: fixed problem with reCAPTCHA module
• added textfield and select widget to CAPTCHA point table for easier adding form_ids
• minor fix
• #237147: Reordered the "Form protection" fieldset on the CAPTCHA administration page

Since CAPTCHA 5.x-3.1 was already more than one year old, it was time for a new release.
Do not forget to run update.php
This new release brings a lot of new stuff and fixes:

• Added visual structure to the CAPTCHA administration links to make it more user friendly
• #200355: fixed typos with administration/administrator
• Updated Greek translation. Updated captcha-module.pot from latest potx.
• #207234 and #207226: by Pancho: various cleanups and tweaks backported to DRUPAL-5--3
• updated outdated russian translation
• #213928: the list of unsolved challenges per user is now FIFO instead of "flush all when full", removes "You can't request more than @num challenges without solving them" message
• #227478: limited size of text CAPTCHA text field to 15 chars
• #231491: minor cange: added a t(...)
• #231491 (minor): added t(..) to permission strings where needed
• added message after installation linking to CAPTCHA admin for better usability
• #241248: fixed problem with overwriting of #pre_render functions in certain situations
• stupid typo

This release is compatible with the minor menu API change in Drupal 6.2.

Other changes since DRUPAL-6--1-0-RC1:

CAPTCHA development branch for Drupal 6.

Version 3.0 of the CAPTCHA module features and fixes the following since version 3.0 RC3...

Captcha API changed! Many bugs fixed, improvements in UI, user help improved.
And much more stable! ;)

Changes since RC1:
Feature #170203: Adding $Id: $ to files.
Feature #168842: add full path to font selector in image_captcha
Feature #168694: reordering captcha's menu.
Fixed #168759: Fixing permitions problems
Patch #168004: Provide a link to free fonts
Fixed #156503: Allows to avoid having to repeatedly do captchas during multiple previews.
Patch #166534: Adds an overview page with examples of all available captha challenges.
Patch #158613: Minor improvements in captcha API, changing value to response, and anwser to solution
Patch #166517: Minor cosmetic tweaks of 'Math' captcha
Patch #166132: Image Captcha - Font Selector
Patch #167166: Wrong check in captcha module
Patch #166877: image captcha cleans to much of $_SESSION['image_captcha']
Patch #160947: CAPTCHA_DESCRIPTION Untranslatable
Patch #165530: empty captcha_answer before rendering
Patch #165393: Configuration page - not where Readme.txt says it is
Patch #163531: Small typo in module
Patch #158747: small image placement issue with image_captcha
Patch #160947: CAPTCHA_DESCRIPTION Untranslatable
Patch #162312: Font License Issue
Patch #161572: user_login / user_login_form can't be captcha-enabled

Development snapshot of the DRUPAL-5--3 branch

Improved help.

drupal 5.x dev

Fixes SA-2007-006 - response validation bypass.

Code clean up and fixed some bugs