Multiple captchas conflict on same document?

I know that this has been discussed before but I just could not find it, sorry

Anyway, I have a jot and 2 eForm instances on the same document, all with captchas. However no mater witch form I use only the value from the last generated captcha will work (so if I use the captcha from the last form on the first form it will work, but if I use the actual form’s captcha it will not). What do I need to do to work around this?

When the captcha image is generated, it writes the value to a $_SESSION variable for later comparison with the user’s input. When the second one is drawn, it overwrites the variable.

You’d need to hack eForm and jot to send the name of the session variable (different for each snippet call) as a parameter to the constructor in veriword.php. Then hack veriword.php to accept and use that session variable. You’d also have to hack the validation code so it used the right one (and maybe send the name of the variable in the POST).

There may be a simpler way, but that’s the best I can come up with off the top of my head.

Thanks Bob. That looks like a lot of hacking and may get overwritten on upgrades. I will need to come up with something else. The client was set on the captchas though

There’s another way I thought of, though it’s kind of inefficient. You could make a second copy of eForm, Jot and Veriword.php with different names (eForm2, etc.).

Then change jot2 and eForm2 to use veriword2.php , and change veriword2.php to use a different name for the $_SESSION variable, and change eForm2 and jot2 to check *that* varable in their validation.

That way you’d be calling two different snippets on the same page and they wouldn’t conflict.

OTOH, you can tell your client that CAPTCHA is no longer effective because there are a number of bots now that can read CAPTCHA images.

As an alternative, you might look at the js code in SPForm that requires the user to use a mouse and/or keyboard for their input. I think it would be much more effective than CAPTCHA.

As an alternative, you might look at the js code in SPForm that requires the user to use a mouse and/or keyboard for their input. I think it would be much more effective than CAPTCHA.

I agree this is more efficient. I will check it out, thanks.

Has anyone tried the method of using jquery and a cookie to prevent spam as described here? It looks interesting.

Hm.... it adds a hidden field. Won’t eForm get semi-hysterical about that?

Won’t eForm get semi-hysterical about that?

Good point. I will have to give this a closer look in the next few days.