Bug fix

Brought to you by: csshyamsundar

#1 Bug fix

Status: open

Owner: nobody

Labels: None

Priority: 5

Updated: 2006-08-24

Created: 2006-08-24

Private: No

A spam-bot might post straight into the FORM's action
page, that is, the asp that does the captcha check.

Since the bot hasn't loaded the previous HTML and thus
hasn't "seen" the captcha image, it has no cookie.

When you check for CStr(SessVal) = CStr(TBoxVal), you
let him post because "" = "".

Attached patch verifies the session var is set :)