Captcha image for registration page, customize according to your theme.

Web Mumbai

<p>WM Simple Captcha for registration page, customize captcha image according to your theme. Change image width, height, background color, set possible characters, add space between two characters, adjust font size, change form label, add your custom css, enable/disable refresh button, change refresh button. Many think more on customization.</p>
<h4>Features</h4>
<ul>
<li>Enable/Disable Captcha for wordpress registration page</li>
<li>Set the captcha image with</li>
<li>Set  the captcha image height</li>
<li>Set the captcha possible characters length</li>
<li>Adjust font size</li>
<li>Enable space between characters</li>
<li>Change font</li>
<li>Set possible letters</li>
<li>Set random Dots</li>
<li>Set random Line</li>
<li>Set text color</li>
<li>Set dots color</li>
<li>Set line color</li>
<li>Change form label</li>
<li>Enable captcha border</li>
<li>Set captcha border color</li>
<li>Enable/Disable refresh button</li>
<li>Change refresh images as your theme</li>
<li>Not case sensitive</li>
</ul>
<p>In Short you can change captcha image style as your theme style.</p>


WM Simple Captcha

This plugin does not really work to stop automated registrations, and here's why:

Inside wm-simple-captcha/classes/wm_simple_captcha_front.php in the captcha_errors method, which is supposed to do the validation of the code, the whole logic is wrapped in a if(isset($_REQUEST['captcha_challenge_field'])){ block.

What this means is that if the request does not contain the captcha challenge field then no errors are output and the captcha is not considered invalid at all, successfully letting the registration through.

Try it yourself, open the /wp-login.php?action=register page, enter Developer Tools and delete the capthca input box. Viola!

Do you really think that automated registration scripts will actually submit all the form inputs? Because they won't. They'll simply send a POST request to /wp-login.php?action=register with the bare minimum username and email parameters and they'll get through. And they don't.

Thus, this plugin does absolutely nothing to stop spam registrations, contains a captcha bypass vulnerability.

Alternatives to WM Simple Captcha

Top alternatives