E-mail sent even if the captcha text entered is wrong

[Sego]

Hi

When I send an e-mail with easyContact, the addressee (the owner of the website) receives the e-mail even if the text is different from the captcha image or not.
I get an alert message: "incorrect security code" - but the addressee receives the message.

Have I missed something? A parameter or something like that?

Thank you for your answer.

Ségo

PS: Thank you for your component - it's great.

[wavejam]

Ditto... Seeing the same thing. Anyone have any tips or tricks? Or is this a bug?

[Jordan]

Seems to be a bug but I haven't had a chance to look into it.

[colink]

I'm always getting an "incorrect security code" message whether the correct security code is typed in or not, and it always sends the email.

It even does this if the captcha is turned off. The security image is correctly not shown but I still get "incorrect security code" and the message is still sent.

I've tried installing 1.11 to see if the bug was introduced in the last release but this seems to exhibit the same behaviour.

[Jordan]

What version of Joomla are you trying to install this on?

[wavejam]

Hi Jordan... Joomla 1.0.15 here...

[colink]

Originally Posted by Jordan

What version of Joomla are you trying to install this on?

1.0.15 here too.

I've done a bit of digging. For me there seems to be more than one issue going on.

There is the problem Sego reported - email sent even if captcha doesn't match.

I also seem to be having an issue with the captcha code not saving into $_SESSION. It seems to be some kind of configuration issue. I tested it on a local XAMP install and the code is stored properly, but not on the production site on Apache. Have you seen this one before?

Cheers,
Colin

[colink]

Hi Jordan,

I did a bit work on this lastnight (UK time).

The sending of emails when the captcha is wrong seems relatively easy to fix. It just needs the email code bringing into the clause for the security_code checking if-statement. To get it working correctly when the captcha is turned-off you also need to add a check for the captcha setting into this if-statement. Find attached my attempt at a patched version of easycontact.php.easycontact.php

My other problem with the session variable being lost is more vexing. The CaptchaSecurityImages.php runs fine but on return to easycontact.php the security_code isn't set in $_SESSION. As I said this must be a configuration related problem because it works on one setup but not another. Still haven't worked out why!

At the moment I've got it working with a rather nasty hack which involves creating the security code in easycontact.php and passing it to CaptchaSecurityImages.php. As long as the $_SESSION['security_code'] isn't set in CaptchaSecurityImages.php in works fine.

Any suggestions as to the actual cause of the session problem would be much appreciated.

[borisgoodenough]

Just installed EasyContact in order to have captcha in my contact forms, and I'm having this same issue -- emails being sent whether or not Captcha is entered correctly or not.

Before I start fooling around with colink's mod of the php file -- is there any other update on this? And has anyone else confirmed that this mod works?

Thanks!

Joel