foto50
But since spammers do not use the form itself and rather send data directly to the correspondent script, it's rather useless. Sending data to "task=register_save" without the captcha variables still will enable spammers to create useless accounts.
You are writing as if you have found something new.the issue was reported within 2 weeks of beta testing(seven months past now) and solution was incorporated with 2 addtional options on version 1.0.3(secondlevel security and botscout options) on enabling which all kind of bot spams are prevented.This includes the one you have mentioned(sending data to "task=register_save" without the captcha variables).Anyway next time when you make these type of 'announcements' try to read the documentation and apply it completely or contact developers before doing so instead of claiming an age old discovery as yours





