Common Captcha Check Error

In this topic, I want to warn you against one mistake that can be made when checking a captcha.


If you check captcha conditionally ,

if (!empty($_POST[ 'captcha_code' ]) && $_SESSION[ 'captcha' ] == $_POST[ 'captcha_code' ]))
{
print " !" ;
}


do not forget to remove the captcha from the session after that! Otherwise, it will be possible to send the correct captcha once, after which the bot can stop hundred thousand times to send nasty things to the server.

Why did I decide that the error is common? Because, for example, in PHPShop it is more than allowed.
')

In PHPShop, captcha can be omitted if its picture has not been uploaded.

As it turned out, everything is much simpler in PHPShop. If the picture is not loaded, you can not enter the captcha.

And if the bot, obviously, does not load the pictures, then why do we need a captcha?

Click here and you will register in PHPShop avtomatichkeski, despite the fact that when you register, you must enter the captcha :)

I really wanted to write in PHPShop about the found bug, but did not find the email address on the site, and tech support works only for script buyers.