PSA: This plugin is bad for site performance.

It uses get_plugin_data(), get_plugins(), and wp_get_themes() as part of its bws_include_init function. This generates a lot of I/Os, as php is going to read all the plugin main php files. File I/Os are the slowest on any system. Please stay away.

Hi!

After uninstalling the plugin three days ago I encountered the problem, that the captcha is still visible on all comment sections on my page.
Here is the page: https://methodenkoffer-sgl.de/enzyklopaedie/fallstudien/#comments

I looked at the page using chrome, firefox and edge and also cleared the browser cache before doing so. We use wordpress version 4.9.7 and used version 4.4.5 of the captcha plugin.

How do I solve this problem?

Thanks,
Maria

Hi I m trying to update my plugins but when i tick on the tool to do it I get a fatal error coming up from captcha
I m not an IT person
any ideas would be appreciated

I want to update the plugin version to 4.4.5 but there’s no possibility to donwload. There’s a message that says: “This plugin has been closed for new installs.” Is there a possibility to download latest version?
Thank you!!

• This topic was modified 6 years, 9 months ago by marisoplete.

My WP is running the latest version. I’ve got File Change Warning on 15 Dec about file changes: 46 added, 8 removed, 34 modified – all related to “plug-ins/captcha/..” Readme.txt file in the updated folder suggests it is version 4.4.5 as of 12.12.2017
As a result of that auto-update (assume done by WordPress plug-in team) – I were unable to get into the DashBoard menus
Resolved by deleting captcha folder on site via FTP.

• This topic was modified 6 years, 10 months ago by hvanalyser.

Now all of a sudden someone responds that the problem has been sorted out and then closes all the posts about this subject.

I will still not trust this plugin whether it is fixed or not.

Hi,

So read the report that this plugin had a backdoor and removed from the repository.

Since then, was restored after the backdoor code was removed?

So the question is, if this were the case, why have e not had an plugin update message?

Is it now safe to use or not?

Many Thanks

This plugin has been reported as dangerous by Wordfence as it has a backdoor built in.

Backdoor Built in

WordPress should remove this plugin from the repository immediately.

Could you explain what the intention was/is of the backdoor script, which wordfence states allows admin access to websites using the plugin, also, what are the intentions for the future, will you now pull the plugin as it has been revealed it’s assume real intention or will it continue to be available, but backdoor free?

https://www.wordfence.com/blog/2017/12/backdoor-captcha-plugin/

WordPress @ 4.9.1
Captcha @ 4.4.5
SMTP by BestWebSoft @ 1.1.0

Recently I updated Captcha to 4.4.5 and discovered that it is incompatible with plugin “SMTP by BestWebSoft”. When these two plugins are activated together, they crash the dashboard and accessing my.Domain/wp-admin/ returns HTTP 500 Error. This is consistent with my two separate servers and two websites.

Please fix the problem or show me how to solve it. Thanks!

• This topic was modified 6 years, 10 months ago by helium6072.

Hi there.

Is there a way to disable the captcha at all for logged in users?
E.g. for a contact form it is ok when visitors have to type in a captcha phrase, but not for logged in members (using the same contact form).

Thanks in advance

Kai

Recent update to the plugin.

Compatible to only 4.8.4, do you plan to test it for the current WordPress version?

Hi there,

I updated to 4.4.4 and for some reason the captcha doesn’t show on one of my sites anymore. It works on all the others. Any idea what could be causing that??

Thanks!

After installing your plugin, the site stopped working normally (VERY-VERY long loads pages), what’s the problem? As soon as he deactivated it, the site immediately began to work normally.

Hi Guys & Gals,

Over the last two days we have been doing a major update to this plugin –

Day 1 New Users
Day 2 Existing Users

Things To Note –
– First launch of simply secure this is stage 1 or beta it will be growing fast.
– We are giving you first use of 5 other plugins (see the dashboard) this will be live in www.ads-software.com over the next month or so.
– If you use Wordfence advanced search it will advise you of the changes DONT panic the plugin is still secure and it was us..
– If there’s a problem leave us a message we have a development team that looks after just the plugins so we will try and help pronto
– We have a contact form should you want any custom features or any site/dev work don’t be a stranger!

Have a great day!!

SimplyWP

• This topic was modified 6 years, 10 months ago by Simplywordpress.

Why would Wordfence report this warning on all the sites I maintain. Did you change code on all my sites or has the plugin been hacked?

* Modified plugin file: wp-content/plugins/captcha/bws_menu/bws_functions.php

* Modified plugin file: wp-content/plugins/captcha/bws_menu/bws_menu.php

I can see a new update today. Please explain why code was changed yesterday?

I’ve just installed the latest version of Captcha plugin, it’s displaying on the wp-admin page as I’ve set up.
It will validate for no input – great.
It will NOT validate for accurate input – not great.
Any solutions/recommendations/ideas?

Warning: file_get_contents(): https:// wrapper is disabled in the server configuration by allow_url_fopen=0 in /home/virtwww/w_mediaclass7-ru_e2e4e5c6/http/wp-content/plugins/captcha/live-trafic-lib/cptch_traffic_functions.php on line 1291 Warning: file_get_contents(https://freegeoip.net/json/109.110.69.212): failed to open stream: no suitable wrapper could be found in /home/virtwww/w_mediaclass7-ru_e2e4e5c6/http/wp-content/plugins/captcha/live-trafic-lib/cptch_traffic_functions.php on line 1291

I had to disable the plugin CAPTCHA…

Hi,
How can I use captcha with Gravity Forms?

Right now I am using Really Simple Captcha but I prefer Captcha interface much better.

I would appreciate any help (^_^)

I translated it 100% into Italian, Admin send me your email address that i send you files .po .mo

Hi
My client tried to reset their password on their website, but kept getting a message to enter the captcha code, but no captcha code image was shown. I needed to remove the setting that adds captcha code for the reset password form (in the Captcha settings page) for them to be able to reset the password properly.

Can you please investigate why this does not show up for the reset password please.

I have noticed that Captcha always has the complete dashicons resource loaded in the frontend:

<link rel=’stylesheet’ id=’dashicons-css’ href=’https://werteagentur.net/wp-includes/css/dashicons.min.css?ver=4.8.3&#8242; type=’text/css’ media=’all’ />

As far as I can see, only the Reload-Icon is used, so it seems very wasteful to load the whole lot. Please consider providing the Reload-Icon in your own CSS, base64 encoded.

Hopeful anticipation from a performance freak!

Tim

Captcha is not displayed.
Text is displayed at the place where the image should be displayed in a state like a broken link.
Although you can log in by entering that letter, it is my request to display the image.

In multi-site, PHP’s safe mode is off.
However, in multi-site that I am managing elsewhere, I can use it without problems, so I do not know myself what the problem is.

I am Japanese and have places where English is bad, but I’m happy if I can help you.

Is captcha 4.3.6 multi site capatible

Hi,
iam using captcha on the wp_admin and it works
but on the lost-password side, i can not see the captcha an the user become a error:
please fill out captcha……

sorry for my horrible englisch, i hope you can understand me…..
br
robert

Hi,

Just so you know I updated WP today and the plugin prevented login.

Uninstalled it, WP is fine again.

I’m guessing the latest WP update changed?

Many Thanks

Hi,

I install the plugin and then when I try to enter to my admin, is imposible.

I try with two diferent account and different browsers but is impossible.

What can i do? Is possible desactivate this plugin… but is a problem for me.

Thanks

Hi!
I’ve found an incompatibility with the W3TC even if I enable the ajax mode. It is caused by W3TC HTML minifier.

The minifier doesn’t like:

			return cptch_add_scripts() .

				'<span

				class="cptch_wrap cptch_ajax_wrap"

				data-cptch-form="' . $form_slug . '"

				data-cptch-input="' . $input_name . '"

				data-cptch-class="' . $class_name . '">

					<noscript>' .

					__( 'In order to pass the CAPTCHA please enable JavaScript', 'captcha' ) .

					'</noscript>

				</span>';

		}

It doesn’t like the line breaks between the <span> attributes and minifies it to “<spanclass” without any space.

I’ve tested this code in multiple online HTML minifiers and most of them are failing. So the double line breaks must be an edge case that is not correctly supported by most minifiers.

Thanks for fixing this.

The Captcha plugin makes most of the Divi settings unavailable.