This post originated from an RSS feed registered with .NET Buzz
by Sascha Corti.
Original Post: My New, (hopefully) much more secure CaptCha Control
Feed Title: Console.WriteLine("Hello World");
Feed URL: http://www.corti.com/WebLogSascha/blogxbrowsing.asmx/GetRss?
Feed Description: A technology blog with a focus on the .NET framework, the Visual Studio .NET tools and the Windows server platform with of course the normal weblog-noise on what's happening in the industry and reviews of the latest geeky gadgets.
I have revised my ASP.NET based CaptCha control that I use in the comments section. Daniel Turini told me (in my comments) that my first control lacks security as I loaded a static image for each character that the user needs to type - something easily breakable via a small script. The new CaptCha control always loads the same image which is an ASPX page that generates an output stream containing a bitmap, that consist of the pass phrase stitched together from an array of static images. Therefore, a program can no longer guess the correct pass phrase by analyzing the HTML source (which is now always the same).