captcha 6.x-2.3

Fix for Session reuse hack

This release includes the fix for an important bug (#810534: Fix CAPTCHA session reuse), which made it possible to reuse CAPTCHA sessions and lowered the barrier to entry for spam bots. The fix is a rather big change, including a database change, so do not forget to run the update.php script.

For more info: also see the release notes for CAPTCHA 6.x-2.3-RC1 and CAPTCHA 6.x-2.3-RC2.

Minor changes since DRUPAL-6--2-3-RC2:

• typo in German translation (reported by GraemeB)
• #766190: Added button to admin page to clear the CAPTCHA placement cache
• added a touch of extra sanitizing of raw posted data
• #881156 by vivekkhurana: disable autocompletion on CAPTCHA response fields
• #780206: Add warning to Performance settings page about CAPTCHA and caching
• #780206: added warning during installation about page caching and CAPTCHA

All changes since DRUPAL-6--2-2:

Major:

• #810534 by soxofaan: fixed CAPTCHA session reuse hack
• #773124: added a new persistence level to always add a challenge, even on multi-step/preview form workflows

Minor:

• _captcha_get_posted_captcha_info() should also handle non posted forms
• #809710: removed debug trace (got in with http://drupal.org/cvs?commit=371374)
• #704110 (follow up) patch by behnas, DamienMcKenna and soxofaan: image_captcha install requirements check did not work when used from installation profile
• #800846 patch by marty: moved captcha_requirements() from captcha.module to captcha.install
• #844148: fixed call-time pass-by-reference problem in update function
• various minor tweaks (syncing some stuff back from DRUPAL-7--1 branch)
• typo in German translation (reported by GraemeB)
• #766190: Added button to admin page to clear the CAPTCHA placement cache
• added a touch of extra sanitizing of raw posted data
• #881156 by vivekkhurana: disable autocompletion on CAPTCHA response fields
• #780206: Add warning to Performance settings page about CAPTCHA and caching
• #780206: added warning during installation about page caching and CAPTCHA