24.02.2014 Views

slides - owasp

slides - owasp

slides - owasp

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

A Secure CAPTCHA Implementation<br />

Client 1<br />

GET /captcha.php + *SESSIONID<br />

Server<br />

2 Create a new<br />

**SESSIONID<br />

6<br />

CAPTCHA + **SESSIONID<br />

POST /verify.php + SESSIONID + Solution<br />

5<br />

3<br />

4<br />

7<br />

Create a new<br />

CAPTCHA with<br />

Random Text<br />

Set CAPTCHA<br />

solution in<br />

HTTP Session<br />

Verify the<br />

CAPTCHA<br />

9<br />

8<br />

Clear CAPTCHA<br />

state or HTTP<br />

SESSION<br />

www.foundstone.com<br />

© 2010, McAfee, Inc.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!