you are right then we should use the password encoding on it....
On Mon, 2009-03-16 at 10:49 +0100, Bruno Busco wrote:
> Thank you Hans,
> the captcha works again right now.
>
> BTW I had the opportunity to give a deeper look at it and found that
> it does not protect the system as I would have expected.
> I mean that the code string is available in the page HTML in an hidden field:
>
> <input type="hidden" name="captchaCode" value="wqPKhT"/>
>
> So it will be really easy for a script to read it and copy back into
> the Verify field.
>
> -Bruno
>
>
>
> 2009/3/16 Jacques Le Roux <
[hidden email]>:
> > It's ok with my last test
> >
> > Jacques
> >
> > From: "Hans Bakker" <
[hidden email]>
> >>
> >> I made some adjustments...can you have a look now with he latest svn?
> >>
> >> On Sun, 2009-03-15 at 22:13 +0100, Bruno Busco wrote:
> >>>
> >>> Hi,
> >>> it seems that the captcha image is not rendered any more here:
> >>>
https://localhost:8443/myportal/control/newRegisterLogin> >>>
> >>> -Bruno
> >>
> >> --
> >> Antwebsystems.com: Quality OFBiz services for competitive rates
> >>
> >
> >
--
Antwebsystems.com: Quality OFBiz services for competitive rates
Locked
