Jake B.
Well-known member
- Affected version
- 2.1.x
I've only tested in two places so far, but both of them don't actually check this response when rendering the captcha on the form, only when
For example - both replying to a thread, and creating a new thread explicitly check
isCaptchaValid
is run on submission.For example - both replying to a thread, and creating a new thread explicitly check
$xf.visitor.user_id
to determine if a captcha should be shown even if isShownCaptcha
returns true for a registered user