#5171 - Block cache may be affecting CAPTCHA
-
By PDStig
- Added
- 6 views
| Identifier | #5171 |
|---|---|
| Issue type | Trivial issue (does not break functionality) |
| Title | Block cache may be affecting CAPTCHA |
| Status | Completed |
| Handling member | Chris Graham |
| Addon | General / Uncategorised |
| Description | Block cache may be causing the CAPTCHA to not re-generate.
Example: The main_join block could have a CAPTCHA on it. I noticed after several page refreshes and even a form submission, the CAPTCHA code was the same (and it still worked). |
| Steps to reproduce | |
| Funded? | No |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".
Comments
The captcha_single_guess option allows the same CAPTCHA to show until it is successfully passed, and this is on by default for usability. It's a usability/spam tradeoff, as obviously there is a risk having it on.
However that option was overly nice. It should prevent forced regeneration on failure, but not prevent regeneration on success too.