"Ap.net/VB" Possible bug in reCaptcha?

[PFunk]

Hello All -

I am using the reCaptch control in a project in Asp.net with VB Code
Behind, VS 2005.

I have been testing an app very heavily and thought everything was
working correctly until I found a problem with validation.

If I don't enter any words in the control it comes back and tells the
user that there verification words are wrong, expected.

However I have found that if I type the first word correctly,
sometimes incorrectly, and hit enter it returns true for
page.IsValid()

In some cases I have intentionally spelled the 2nd word wrong and the
page.IsValid is still coming back true.

Update: I just received the challenge Darling, something else

All I typed was Darlng and it validated the page.

Is there a property of the control that I need to set in order to
validate on both words, is the control only meant to submit one of the
two words, or is this a bug?

I am very confused because it seems to be a sporadic problem
reproducing every 3 to 4 attempts.

I am now wondering if it’s because the page is using https. Is there
something I need to set in the asp.net api reCAPTCHA control to handle
the secure connect correctly?

Code bellow.

Has anyone else had this problem?

TIA

Patrick

Keys removed here for obvious reasons.

Code behind

Try
If recaptcha.Page.IsValid Then
DoStufflikesendEmails()
Else
lbl_User_Messages.Text += recaptcha.ErrorMessage.ToString
End if
Carch ex as exception
Lbl_user_messages.text = ex.tostring
End try

HTML

<recaptcha:RecaptchaControl ID="recaptcha" runat="server"
PublicKey="Removed" PrivateKey="Removed" />

[Paul Herring]

On Fri, May 16, 2008 at 10:28 PM, PFunk <pmof...@holmans.com> wrote:
[...]

> However I have found that if I type the first word correctly,
> sometimes incorrectly, and hit enter it returns true for
> page.IsValid()
>
> In some cases I have intentionally spelled the 2nd word wrong and the
> page.IsValid is still coming back true.

Only one of the words are validated. The second isn't - by the nature
of reCAPTCHA it cannot be. Even if it isn't there.

--
PJH

http://shabbleland.myminicity.com/