search

mewebstudio / captcha

Captcha for Laravel 5/6/7/8/9/10/11
MIT License
2.47k stars 453 forks source link

Crackable? #157

Open stefkes opened 5 years ago

stefkes commented 5 years ago

After adding this captcha to my contact form, I'm still getting just as much spam coming through. Perhaps it's not a bot but an actual person, but I'd be surprised.

All the tests I've done tell me everything works as it should (captcha field is required and it blocks form submission when wrong), including with javascript disabled.

Here's an example of a captcha generated on my contact form

Is it possible a bot can now read this?

Osolemio commented 5 years ago

@stefkes,

Seems YES I have this issue as well with the site registration form And I'm sure that's a bot (Perhaps it could be some machine learning algorithm's training). I had to add a special log analyzer to block all "toxic" IPs I wish the developer made the captcha stronger :)

Cheers

stefkes commented 5 years ago

Thanks for the info. Let's consider this thing useless then.

Isn't it easier to use reCaptcha than a special log analyser?

Osolemio commented 5 years ago

Thanks for the info. Let's consider this thing useless then.

Isn't it easier to use reCaptcha than a special log analyser?

Nope :) Shell script size is 10 lines. As a bonus - the permanent ban of all black IPs.