Browser may auto-fill CAPTCHA input with arbitrary values

This means that the user actually entered her zip code into a text field called "captcha" on a site...

Nevertheless, it's a good idea to prevent this.

d'oh - reversed condition ;)

+++ b/mollom.module
@@ -1394,6 +1394,11 @@ function mollom_process_mollom($element, &$form_state, $complete_form) {
+  if (!variable_get('mollom_testing_mode', 0)) {

I'd simply get rid of the if-statement and always disable auto-complete. Other than that, I'm happy with this patch.

Committed to master.

#2: mollom.captcha-autocomplete.2.patch queued for re-testing.

Committed to 6.x-1.x

whoopsie, clicked too fast. ;)

For extra safety, we should also prevent browser autocompletion for the honeypot field.

Committed to all branches.

A new development snapshot will be available within the next 12 hours. This improvement will be available in the next official release.