Skip to content

Security

Hendrik Rätz edited this page Nov 22, 2016 · 1 revision

Things to watch out for in order to avoid circumvention:

  • keeping track which CAPTCHA was sent to the user

  • That way it is not possible to use another CAPTCHA except than the provided one.

  • properly destroying of the session

  • Through this it is not possible to reuse the session ID of a known CAPTCHA

Clone this wiki locally