MyBB Community Forums

I think MyBB's CAPTCHA is way too easy. As you can see in the picture and in MyBB's code, the string is drawn after all the drawing schemes.
No act is done to destroy the string's look for the sake of deceiving spambots.

The proper way would be to execute some kind of blurring scheme such as the already built function "draw_dots" but AFTER drawing the string.

The MyBB default CAPTCHA is there to 'try' to prevent spam registrations shortly after the forum is installed. It is up to the administrator to configure the more secure alternatives (reCAPTCHA, Are You A Human)...

Still, changing from:

// Draw dots on the image
draw_dots($im);

// Write the image string to the image
draw_string($im, $imagestring);

To:

// Write the image string to the image
draw_string($im, $imagestring);

// Draw dots on the image
draw_dots($im);

Wouldn't hurt anyone. I consider it as a bug.



Cheers!