Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.Pages with multiple CAPTCHA protected forms give always "CAPTCHA session reuse attack detected."
for example:
- CAPTCHA on user login block, which is on every page
- CAPTCHA on comment form
- post comment form with correct CAPTCHA
- result: "CAPTCHA session reuse attack detected.", which comes from processing of user login block
| Comment | File | Size | Author |
|---|---|---|---|
| #1 | 995748-reuse-attack-multiple-forms-01.patch | 2.49 KB | soxofaan |
Comments
Comment #1
soxofaan commentedThis patch should fix it
Problem is still possible when using multiple forms of the same type (same form ID) on the same page
Comment #2
temizu commentedit seems the problem is solved, thanks a lot. good work
Comment #3
soxofaan commentedthanks for testing,
committed for Drupal 6: http://drupal.org/cvs?commit=464000
to be ported to Drupal 7
Comment #4
soxofaan commentedport of this patch fro Drupal7 depends on #810534: Fix CAPTCHA session reuse
Comment #5
soxofaan commentedhttp://drupal.org/cvs?commit=470426
includes this patch for D7
still to port: tests from #3
Comment #6
soxofaan commentedported test is included in http://drupal.org/cvs?commit=470926