View Single Post
Old 08-10-2006, 01:51 PM   PM User | #6
iota
Registered User

 
Join Date: Oct 2004
Posts: 592
Thanks: 0
Thanked 1 Time in 1 Post
iota is an unknown quantity at this point
I think I'd better to use sleep(rand(5, 10)); for after xx tries with session cookie validation.

I think CAPTCHA is most suitable way coz almost all sites on the web use it already.

So are there any valunerablities or weakness on CAPTCHA ?

Some Captcha are done by means of md5(secret_key+random_num).

can they said secure ? coz once we get secret_key, .....
iota is offline   Reply With Quote