[Bug 6367] New: does not work if code length set to less than 6

[email protected]
Newsgroups gmane.comp.cms.xaraya.bugs
Message-ID <[email protected]>
http://bugs.xaraya.com/show_bug.cgi?id=6367

           Summary: does not work if code length set to less than 6
           Product: App - Modules
           Version: Weekly Tarball
          Platform: Other
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P3 - Standard
         Component: FormAntiBot
        AssignedTo: [email protected]
        ReportedBy: [email protected]
         QAContact: [email protected]


User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.8)
Gecko/2009032609 Firefox/3.0.8
Build Identifier: 

The admin interface in version 0.6 of this module allows for setting the code
length to less than 6, but doing so causes the module to stop working
completely.

My suggestion would be to validate the code length field to disallow submitting
the form if user sets code length to less than 6... or edit the code so it
works with a code length of less than 6.  There are situations where a length
of less than 6 is desirable even if it compromises security a tiny bit.

Reproducible: Always


-- 
Configure bugmail: http://bugs.xaraya.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

---- ** IMPORTANT ** READ BELOW ** ----
[Clip Me Start]
--------------------------------------------------------------------------
If you wish, you can reply to this message directly **however**, make sure
to use the "Reply To All" feature of your client **and** ensure that the 
bug specifier is in the subject (ie: [Bug ####]). Also, you _MUST_ have 
you're From or Reply-To address set to the same address you use to log
into your bugzilla account or your reply will not be attached to the bug.
--------------------------------------------------------------------------
[Clip Me End]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.