Um so I was in for a little bit of a surprise tonight. I spent a good 20 mins trying to figure out why I was able to submit a form knowing that what I entered into the recaptcha field was invalid. Is it true that you don't need to input the exact words it displays? If it shows me two words and I misspelled one of the words, I still pass validation? Same goes if "hello world" and I input "hell man" it still works.
+1
A:
With recaptcha, you are only tested on one of the words, while the other is used to help computers in scanning printed material. So you only need to get one right to pass (which one you need is random). :D
CrazyJugglerDrummer
2010-03-12 00:54:09
yea, it would've helped if I RTFM! Now I have to figure out which field I should check against when using it w/ Codeigniter. "recaptcha_challenge_field" or "recaptcha_response_field." Or does it not matter.
luckytaxi
2010-03-12 00:55:30
why are you messing with challenge_field and response_field yourself? just use recaptcha_check_answer. http://saidur.wordpress.com/2008/10/21/how-to-use-recaptcha-in-codeigniter/ http://recaptcha.net/plugins/php/
CrazyJugglerDrummer
2010-03-12 01:01:41
I'm not, I wanted to make sure I was "checking" against the correct field. I've seen tutorials where some folks check against 'recaptcha_challenge_field' while others check against 'recaptcha_challenge_field'
luckytaxi
2010-03-12 01:30:52
A:
the recaptcha site describes why this is. You need to get one of the two words correct; only recaptcha knows which one.
But if a computer can't read such a CAPTCHA, how does the system know the correct answer to the puzzle? Here's how: Each new word that cannot be read correctly by OCR is given to a user in conjunction with another word for which the answer is already known. The user is then asked to read both words. If they solve the one for which the answer is known, the system assumes their answer is correct for the new one. The system then gives the new image to a number of other people to determine, with higher confidence, whether the original answer was correct.
Michael Petrotta
2010-03-12 00:56:34
It only checks for one actually. One it knows to be correct, the other it doesn't.
Laykes
2010-03-12 00:58:40