ponyach.ru new captcha
Hello, we released new captcha for ponyach.ru, using google's RECAPTCHA V2, because old captcha was vulnerable to brute force.
This commit contains all captcha related changes https://github.com/TryCatchThr0w/ponyach.ru/commit/fd1b595846557c73e739ea9373849aaed3c6999a Maybe you find this useful.
Like old captcha, when user solved captcha and posted a message, ponyaba allows message posting without solving captcha, so in other words it just bind to user session, not IP.
Client can GET /recaptchav2.php?c=isnd and get '1' if captcha needed, or 0 if captcha is already solved
As you can see, this method checks user session for solved captcha, so client should have a open session, when asking recaptchav2.php.
Can you please fix Ponyach module? Thanks.