The captcha_single_guess option allows the same CAPTCHA to show until it is successfully passed, and this is on by default for usability. It's a usability/spam tradeoff, as obviously there is a risk having it on.
However that option was overly nice. It should prevent forced regeneration on failure, but not prevent regeneration on success too.
The captcha_single_guess option allows the same CAPTCHA to show until it is successfully passed, and this is on by default for usability. It's a usability/spam tradeoff, as obviously there is a risk having it on.
However that option was overly nice. It should prevent forced regeneration on failure, but not prevent regeneration on success too.