Math CAPTCHA Script !!

[tkreturns]

index.php:
<form method="POST" action="cc.php"> 
<img src="captcha.php"> <br>
<input type="text" size="10" name="check"> <br> 
<input type="submit" name="submit" value="submit"> 
</form>

captcha.php:
<?php session_start(); 
$img = imagecreatefrompng('black.png'); 
//value 1
$numeroa = rand(1, 9);
//value2
$numerob = rand(1, 9);
$numero = $numeroa + $numerob;
$display = $numeroa . '+' . $numerob;
$_SESSION['check'] = $numero; 
//The function imagecolorallocate creates a 
//color using RGB (red,green,blue) format.
$white = imagecolorallocate($img, 255, 255, 255); 
imagestring($img, 10, 8, 3, $display, $white);
 header ("Content-type: image/png"); imagepng($img); 
?>
cc.php
<?php  
session_start();   
//Sessions in PHP are started by using the   
//session_start() function.    
//Like the setcookie( ) function,   
//the session_start function must come before any HTML,   
//including blank lines, on the page.session_start();   
//Check if the security code and   
//the session value are not blank   
//and if the input text matches the stored text  
if(isset($_SESSION['check']) && (md5($_POST['check']) == md5($_SESSION['check']))) {   
echo 'Input OK';  
}else{   
echo 'Input Wrong';          
}

[bigboss]

Where is is case break? If wrote wrong code then how can we will se code error?

[firemax]

this cpatha code is useless if spammer did not use the your site forum to submit data.

Update: cc.php:

<?php 
session_start();  
//Sessions in PHP are started by using the  
//session_start() function.   
//Like the setcookie( ) function,  
//the session_start function must come before any HTML,  
//including blank lines, on the page.session_start();  
//Check if the security code and  
//the session value are not blank  
//and if the input text matches the stored text 
if(isset($_SESSION['check']) && (md5($_POST['check']) == md5($_SESSION['check']))) {  
echo 'Input OK'; 
}else{  
echo 'Input Wrong';         
}

[tkreturns]

thnx bro

[adex3g]

Let me check out

[haraldl]

Spammers use triggers to define an url... examples :

(index\.php\?PHPSESSID=[a-z0-9]{1,250}&action=verificationcode;rand=[a-z0-9]{1,250}) 
(index\.php\?PHPSESSID=[a-z0-9]{1,250}&action=verificationcode;vid=register;rand=[a-z0-9]{1,250})

a database handling urls sends captcher images to a captcher solving server,
but the top soft cracks even recapctha, so spammers dont need a solving server.
To avoid? it depends on script how you block.
If you want to avoid spam try htaccess.

RewriteEngine On
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{REQUEST_URI} .register.php*
RewriteCond %{HTTP_REFERER} !.coding-talk.com [OR]
RewriteCond %{HTTP_USER_AGENT} ^$
RewriteRule (.*) http://google.com/ [R=301,L]

spammers use a direct url.A real user would come from coding-talk.com and
not directly without a referer.

[Jgutz]

can some0ne put that captcha to this script

[frostymarvelous]

Using that htaccess, you will only hurt your users.
Some users don't send referers due to proxies or browser setup.
A spammer can easily send a referer. Eg curl setopt referer can be simply used. You need to research before using certain techniques.

[bigboss]

can u make for lava???