Write Forums

Captcha problem users just refresh and it will let them auto submit again

Posted on 16th Feb 2014 07:03 pm by admin

Users will just re submit and not have to enter the new captcha.. ? Lol but if i refresh the page, the captcha auto makes a new1 so u cant submit.

But if u enter captcha code alrdy, then submit form correctly, and press refresh to auto submit form, it does it? This is a major security risk here is my code, thanks:

Code: session_start();

$RandomStr = md5(microtime());// md5 to generate the random string
$text = rand(10000,99999);
$_SESSION["key"] = $text;
$height = 25;
$width = 35;

$image_p = imagecreate($width, $height);
$black = imagecolorallocate($image_p, 100, 5, 5);
$white = imagecolorallocate($image_p, 155, 155, 025);
$font_size = 16;
$text=substr($_SESSION['key'],0,3);
imagestring($image_p, $font_size, 5, 5, $text, $white);
imagejpeg($image_p, null, 80);

then my HTML:

Code: <tr class="bts ce"><td colspan=2><b>Security Code Confirmation</b></td></tr>

<tr>
<td align="right">Your unique security code<input type="hidden" name="secId" value="76c2b0e6f20ed0f1b209bcf39dee8e06"></td>
<td>
<img src="php_captcha.php">

<span class="desc">If The images are broke, please contact us.</span></span>
</td>
</tr>
Is there a way so people cant auto submit form?

Captcha works if u refresh but people can just auto submit the form and it will keep submiiting...

No comments posted yet

312 34 Tweet

 formating when pulling data from a mysql database 
Ok so Im not to sure if this is the right thread to post in but here is my catch 22 issue.

I 
Help with some dates 
I have a list of dates in an array:

$mondays = array(
				strtotime("October 12, 2009
Displaying Multidimensional Arrays...about to put my head in a vice, PLEASE HELP 
I am fairly new to PHP and MySQL and I have a problem which I have been trying to resolve for days. 
Save cookie to DB 
I'm working on a pixel tracking script for an incentive website and I need to use an ASP script to s
Upload, SSL and more php help 
I recently just installed a ssl cert and do i use https for the whole site or just for the checkout.
Looking for help on using joining mysql tables and php.... 
Does anyone have any good links to references on how to pull mysql data, through joining tables and 
php global variable 
how can we create global variable so we can use its value in any form.. Please give example to