1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Not Planned Add reCaptcha keys to configuration

Discussion in 'Closed Suggestions' started by Kent, May 26, 2013.

  1. Kent

    Kent Active Member

    To change the keys, you must edit library/XenForo/Captcha/ReCaptcha.php directly. It'd be nice if this could be changed in the admin settings instead, so it won't get overwritten with updates or marked as an invalid file.

    Doing so prevents a known attack with reCaptcha caused by using global keys where an attacker can host the captcha on their site and use the entered captcha for evil things instead of confirming it. This isn't much of a serious threat compared to paid workers entering captchas.

Share This Page