Shopping Cart Operations > Security

Captcha can be bypassed

(1/1)

aussiefrog:
I am using 1.2.10

When creating a new account the captcha can be bypassed using these instructions:

- Fill in all required fields
- Submit the form (ignoring captcha or after it has failed)
- Refresh the page with F5

The form will be successfully submitted without a valid captcha.

This does not work for the contact form.

Can you please address this?

Basara:
Hello, thank you for reporting issue.

It is already fixed in 1.2.11 version please see this commit https://github.com/abantecart/abantecart-src/commit/d2a5c5700f3eb3caf561e5b45a04697d41f111d5

You can try to replace your public_html/storefront/controller/pages/account/create.php file with new from 1.2.11

Navigation

[0] Message Index