Hi,

It seems to me that it's being bypassed by bots, and I'm getting an average of 10 spams a day from it. Below are my configurations.

Characters Used: aAbBCdEeFfGHhijKLMmNPQRrSTtWXYZ23456789

Code length: 5

Font: DejaVuSans.ttf 2.20

Size: normal

Char spacing: normal

Distortion level: normal

Smooth Distortion (yes)

Add salt and pepper noise (yes) - by the way, pepper is spelt wrongly (peper).

Noise level: normal.

Attached are a few examples of the results.

I can't really make it any more complicated, as it would be too hard for normal users to see the image or letters..

CommentFileSizeAuthor
1536719462.jpeg5.77 KBAnonymous (not verified)
1762636771.jpeg6.03 KBAnonymous (not verified)
1625125830.jpeg5.63 KBAnonymous (not verified)
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

soxofaan’s picture

soxofaan CreditAttribution: soxofaan commented
Component: Code » Image Captcha (image_captcha)
Category: bug » support

Spam doesn't always comes from bots, there are also humans that like to be annoying or even get paid for it.
Are you sure that bots posted the spam, and that they did break the CAPTCHA image?

What is the persistence setting of the CAPTCHA module?

Anyway this is not a bug of the CAPTCHA module, just a limitation of the system.

If you can't fight your spam with CAPTCHA, I would suggest something like http://mollom.com or the akismet module

soxofaan’s picture

soxofaan CreditAttribution: soxofaan commented

(btw, I fixed the "pepper" typo, thanks, good catch)

Anonymous’s picture

Anonymous (not verified) CreditAttribution: Anonymous commented

Hi,

Thanks for the links, i'll check them out too. Good questions. No i'm not 100% sure it is bots. If there's a way to find out i'll do it. But i *think* it's a bot because I increased my code length from 5 to 6 letters, and I haven't received any spam so far. If it was a user, I think he would have picked it easily. Anyway, I failed to show you an example of the spam. I will when I have some.

As for persistence, it's on "always add a challenge".

It's a shame being a limitation, but what can we do... Anyway, i'll keep you updated on this.

P.S., while you're at it, there are a few more spelling mistakes :)

admin/user/captcha -> administration (spelled adminstration) in 1st paragraph, and under General settings.

admin/user/captcha/image_captcha -> careful (spelled carefull). bilinear (spelled bilineair), overlaid (spelled overlayed)

Keep up the good work!

soxofaan’s picture

soxofaan CreditAttribution: soxofaan commented
Status: Active » Closed (works as designed)

Closing old/outdated issues for 5.x releases, which is officially unsupported now.