Opened 10 months ago
Closed 4 months ago
#4779 closed Defect (worksforme)
user/requestnewpassword captcha view and validation
| Reported by: | ismayil.khayredinov | Owned by: | |
|---|---|---|---|
| Priority: | normal | Milestone: | Needs Review |
| Component: | Core | Version: | 1.8 |
| Severity: | minor | Keywords: | |
| Cc: | brett@… | Difficulty: |
Description
forms/user/requestnewpassword echoes the input/captcha view yet provides no way of validating it in the action
Change History (1)
comment:1 Changed 4 months ago by cash
- Resolution set to worksforme
- Status changed from new to closed
Note: See
TracTickets for help on using
tickets.
The approach has been to intercept the action, validate the captcha, and then continue the action processing if it passes. See https://github.com/Elgg/captcha for an example. This approach allows you to add a captcha to any form without having to change an action script. The only disadvantage that I know of for this approach is that it breaks sticky forms. I'm opening a ticket for that.