Why is the CAPTCHA module producing images and storing them in the /captcha/image directory?
I found a ton of these images sitting in this directory and on my servers after I looked at my server logs. By default, this folder is HIDDEN on my servers.

I am concerned about this from two issues:
1) Large amount of images piling up on the server that aren't being deleted
2) A potential security risk into the CMS

Please advise

Comments

arnabdotorg’s picture

arnabdotorg commented

This should NOT be happening!
This is how the old version used to work, NOT the new one. Captcha images are rendered as separate drupal page accesses, and are not flushed to disk.

1. Please upgrade to latest versions of the code.
2. Do you have any out-of-drupal caching implemented?
3. "hidden" can be reset by doing chmod 777 images -R

arnabdotorg’s picture

arnabdotorg commented

Closing; please reopen if this is a geniune problem.

arnabdotorg’s picture

arnabdotorg commented
Status: Active » Closed (fixed)