OK. I took a look at the code and you're right. It should block them completely.
Open addons/_captcha/front_captcha.php and replace all the code inside with the following:
<?php
/**************************
SVN file version:
$Id: admin_editexif.php 57 2007-10-28 19:10:34Z schonhose $
**************************/
/*
Captcha version 1.0
Written for Pixelpost by Dennis Mooibroek, http://foto.schonhose.nl
License: http://www.gnu.org/copyleft/gpl.html
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation; either version 2
of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
*/
// Same info as non admin addons
$addon_name = "CAPTCHA addon (frontpage functions)";
$addon_description = "This file contains the frontpage functions for the CAPTCHA addon. This addon tries to prevent spam by using so called CAPTCHAS (graphical numbers in this case). Add the <CAPTCHA> tag below the email-form-line in your image or comments template (depends where your comments-form is)";
$addon_version = "1.0";
// The workspace stuff
add_front_functions("check_captcha", "comment_passed", "", "");
function audit() {
//session_start();
if(!isset($_SESSION['digit']) || !is_numeric($_SESSION['digit'])) {
return false;
}
$digit = $_SESSION['digit'];
//error_log("CAPTCHA session value" . $_SESSION['digit'] ,0);
$userinput = $_POST['userinput'];
//error_log("CAPTCHA sent value" . $_POST['userinput'] , 0 );
session_destroy();
if (($digit == $userinput) && ($digit > 1) ) {
return true;
} else {
return false;
}
die("woot");
}
function check_captcha(){
$wrong_captcha_title="wrong code entered";
$wrong_captcha_body="looks like you are a robot, if not please try again and enter the correct code<p /><a href=" . $_SERVER['HTTP_REFERER'] . ">try again</a><p />";
if(!audit()) {
echo '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html><head>
<meta http-equiv="refresh" content="8; URL=' . $_SERVER['HTTP_REFERER'] . '" />
<title>' . $wrong_captcha_title . '</title>
<link rel="stylesheet" href="admin/admin_index.css" type="text/css" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
</head>
<body> '.
$wrong_captcha_body
.'
</body></html>';
exit;
}
}
?>
Also, do as I said in post #2, http://www.pixelpost.org/forum/showpost.php?p=53944&postcount=2
Does this help?