Using transients to store captchas

I think that, while this method could be secure, there are many advantages to using an off-the-shelf captcha system, both in terms of the security of the captcha images/audio/media, and also in terms of performance advantages like caching. If you use a captcha widget which is JavaScript based, for example, the underlying WordPress-generated page could actually be completely cached as a static page by a number of caching plugins. If you are generating the captcha in PHP each time, this would not be possible

If you do go down this route, one thing you’ll want to do as well is to add a hidden nonce to the form as well to make sure that the user agent responding to the captcha is the one who you just generated it for. WordPress’s wp_nonce function can help you do this easily. Otherwise, if you do not flush your captcha transients carefully, it’s possible for someone to cache that page with the captcha and have another user agent send the response.

Related Posts:

  1. Creating my own Admin Forms in a WordPress CMS?
  2. How to implement a custom password field that redirects to another page upon correct password?
  3. Add Div to Comment Form
  4. Adding custom field in all widgets, but at the top of the form, in admin area
  5. Custom search to display results within same page
  6. How Can I Move Data From Form 1 To Form 2
  7. Saving contact form 7 data into custom Table
  8. Woocommerce custom checkout form
  9. Custom login and registration forms
  10. Custom Form not generating URL
  11. How do I make Dynamic Student Admission Form?
  12. How to create multipage form and redirect to specific URL based on inpput?
  13. No plugin populate user information in to form
  14. How do I add a dropdown menu to a form?
  15. How to automatically pull an information from a form field onto an other page?
  16. How to submit form data in the same page in WordPress without reloading the page?
  17. Custom dropdown search form that allows users to select option B based from Option 1
  18. How to get name and email value from a custom form and add it to campaign monitor subscriber list?
  19. Custom user fields validation on registration
  20. Two searchforms with different categories/posts per page
  21. add unique code required to register
  22. Page template with custom html fields inside a content
  23. Version Control: Entire site or just pieces?
  24. Getting a stack trace when an error occurs?
  25. Multiple WordPress sites with docker
  26. .maintenance and maintenance.php also in multisite install?
  27. how to redirect to a custom password retrieval page
  28. Is there a plugin to make attaching images easier?
  29. Custom category order with get_categories
  30. Pagination Help on Crazy Custom Authors Page
  31. Getting rid of the #038; when string replacing content
  32. Querying multiple WordPress custom fields with AND qualifier
  33. page_template toggle between 2 templates + 2 permalinks for same post
  34. Create a Custom menu item fetched by Product Categories and Sub Categories
  35. Multi-Site Plugin Activated (Not Network-Activated), What Happens?
  36. Gutenberg: How to mix dynamic and static output?
  37. add_rewrite_rule won’t work
  38. How To Add buttons to the toolbar which appears in TinyMce when you click over images
  39. Last time a user logged in
  40. Setting up Different Layouts for Each Product Category and Subcategory [closed]
  41. Prevent access to custom login page for logged in users
  42. RSVP form for Facebook events from a WordPress post?
  43. Adding all sub-pages to the menu manager
  44. Make wordpress generate a custom XML file(not a sitemap) that is updated only when new content is posted?
  45. How did I enable atom feeds in a fresh WP3 install?
  46. Hide devices selection from customizer?
  47. Add options to the “Screen Options” section on the “Menus” editor
  48. Split Conference WordPress Page in different years
  49. Make custom user table column filterable
  50. How I display post of the post type group by year of post?
  51. How to update preview when custom setting changed in my custom widget
  52. Hide editor with specific post meta value
  53. Side by side blogging?
  54. WordPress slugs and 404 handling takes preference over folders in site root?
  55. Add a date updated/date modified option using custom fields
  56. Extra theme – header customization help [closed]
  57. Disable widgets in customizer for sidebar
  58. How do I change .css versioning?
  59. Save title as custom field on custom post type
  60. Qtranslate + Woocommerce (multiple tinymce) [closed]
  61. My custom sql query for getting a username giving me a warning and an error
  62. How to solve this problem with my subdomain?
  63. how to add custom logo to my template
  64. Semi complicated custom taxonomy question
  65. Duplicated content with custom shortcode
  66. Display a list of subcategories (from specific Category) a post belongs to
  67. Display posts by combining multiple meta key
  68. Custom Content Page
  69. Custom theme – how to link the image without posting it
  70. How to add active state to the navigation links?
  71. How to add functionality to an existing theme (using child themes)
  72. How do I fix my static page
  73. URL and Site title outputting on Login page
  74. List of contents of entire blog
  75. optimal taxonomy or custom post types
  76. Easily add custom HTML outside the main container?
  77. adding fade on mouseover to images
  78. Customize section does not show my widget areas
  79. Lightbox not showing image caption
  80. WordPress core jquery version file not loaded?
  81. Make Widget appear on Dashboard
  82. WP_User_Query Search Multiple Keywords from a Multi-Select Field?
  83. Woocommerce dependent attributes
  84. How to send custom mail when a user complete a specific form
  85. clickable toggle menu, help
  86. twenty seventeen customizer duplicates section content
  87. How to append the excerpt to the content in the single post page?
  88. How to Password Protect whole site except for some subdirectories
  89. Displaying all Custom fields on post except some
  90. WordPress Install – “end of script output before headers” when running simple php script
  91. Ordering a specific post type
  92. How to replace part of shortlink with nothing
  93. Header image doesn’t show up on page
  94. Is there a way to hide a user’s posts from their Activity feed?
  95. Setting up staging area
  96. Assign classes to Custom fields
  97. Do i need to use PHP in customizer api?
  98. Add variable : 1 Week ago
  99. When is it OK to create a custom table for a plugin? [duplicate]
  100. Prevent posts from being published if the ‘Uncategorized’-category or no category is selected
Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)