Ticket for: User Verification
0
German
If I manually delete div class=g-recaptcha block from page via Inspect Code in browser and click submit button, then reCaptcha check is not performed at all.
Automated scripts that not pass g-recaptcha-response field with POST request can easy register many new users without confirmation.
Please add something like
if (isset($_POST['g-recaptcha-response'])) {
...
else {
if ($_SERVER['REQUEST_METHOD'] === 'POST' && $default_registration_page == 'yes') {
$errors->add('loginCaptchaError', $captcha_error);
}
}
to all reCaptcha verification blocks in functions-recaptcha.php.
0 Subscribers
Submit Answer
1 Answers
Best Answer
0
Hi, Thank you for letting us know about the issue. Our team is looking into this, and we'll update you if needed.
