supertuxkart / stk-addons

SuperTuxKart Addons Website
Other
37 stars 28 forks source link

CAPTCHA bypass through API? #46

Open tomreyn opened 9 years ago

tomreyn commented 9 years ago

I'm re-reporting here what was initially posted to the wrong issue tracker:

When registering a new user account on Addons using the graphical web interface, the application requires the user to solve a CAPTCHA. Registrations using the API (such as used by the game client) do, however, now require a CAPTCHA to be solved. This may indicate that the anti-abuse functionality the CAPTCHA is supposed to provide on the web interface can be bypassed by suing the API.

vampy commented 9 years ago

This should also be kept open in the client repo.