Security issue (captcha check realisation)

sampoyigi

True, the hidden input shouldn't be there.. You can remove it and captcha still works.. I guess its one of them ones i forgot to remove..

sampoyigi

https://github.com/tastyigniter/TastyIgniter/commit/c3cdbfd27a63cc249723ec1be5f3385bc5b7ac86

Edw

Why does the current code of the captcha appear in the hidden field? Open source of any page with a check captch and be surprised, input hidden field with name captcha_word contain current code. What is the meaning of captcha then? With wget, this protection is very fast.