Looking for feedback for SWF/PHP CAPTCHA

talk open source
1

Hi,

I was looking for a CAPTCHA that is super easy for HTML coders with little PHP scripting experience to implement. Where I work, the designers do the HTML and hand forms, etc off to us for coding the backend. Anyway, I was thinking that SWFs are harder for bots to see, and that might make a good feature for a CAPTCHA.

I attached a ZIP with the fla, swf, and php scripts.

Basically, I found a AS class that makes a MD5 hash. So, I set up the form to save the PHP timestamp when the page loads and do two things with it…

  1. Send the timestring to the swf with FlashVars, MD5 it, and display the first 6 characters in the CAPTCHA

  2. Save the timestamp as a session variable so that when the user submits the form, the form processor takes the timestring, MD5’s it, and compares the first 6 strings to what the user submitted.

I am just looking for feedback from anyone who might be able to tell me if this seems like a secure solution for CAPTCHA and if so, I wanted to offer it to others

2

Looks/sounds interesting (althought I cant open it) Is this CS3/and or/AS3?

3

Thanks for taking the time. The AS code is version 2.0. I resaved it as Flash 8 format. I talked to some of the other developers at my work, and they all seemed to think it should work well. I am going to expand on the php side of it to give the option to validate it on the client side before submission to the server.

4

[QUOTE=djheru;2325351]The AS code is version 2.0. I resaved it as Flash 8 format.[/QUOTE]

I still cant seem to open them in Flash 8 (they still seem to be CS3 files). Likewise I thank you for sharing. Can you recheck the FLA’s again (Save As - Format - Flash 8).

5

DOH! Sorry, fixed now…