remove "captcha" from html ids and classes [#917274]

This is a GREAT module and I love it. Its my first line of defense for the forms I build, and I can "upgrade" to a manual captcha style (like image) if the spammers program to account for this.

In looking at the html, its very clear that the field is a captcha field... and a hidden one at that. For those that are interested, here is a sample of the HTML:

<div class="hidden-captcha"><div class="captcha"><input type="hidden" name="captcha_sid" id="edit-captcha-sid" value="5"  />
<div class="form-item" id="edit-captcha-response-wrapper">
 <label for="edit-captcha-response">Customizable question inserted here: </label>
 <input type="text" maxlength="128" name="captcha_response" id="edit-captcha-response" size="60" value="" class="form-text" />
</div>

I'm wondering if it would be possible to alter the form so that the classes and ids are not listed as captcha... which would make it harder to figure out and work around. This could be an extra step(s) for those who want to do it or just an admin option.

Just a thought.

thanks again!

Comments

Comment #1

AlexisWilke commented 20 September 2010 at 20:45

The very first div is the only one that I generate. The rest is done by the CAPTCHA system. Although so far it works for me, I know that at some point this will "break"... It could be that many of the hacker's code detect the word CAPTCHA and decide that it's not necessary to do anything in that form field...

So, on my end I could fix the hidden-captcha class, but not the others... That could be done along the customizable question although the CSS would need to be dynamically generated. Not hard just requires a public file folder which everyone does not have. Or leave it to the admin to go change the CSS manually, which is a problem on multi-site installs. Hmmm...

Thank you.
Alexis Wilke