own registration image verification

[rickyj]

Hi,

 

Im thinking of writting my own Text(picture) verification

 

I know there are methods out there, but I dont want to use standards (since i know the common ones always get hacked eventualy).

 

Im thinking of writting this in php, where the php gets a image number (say from the milliesecond that the user has gone to the registration of this page) eg, 01 millseconds = pic 1 (an algorithum will modify this, but you get the idea)

 

But I have then run into security problems, with various approaches:

 

1. onSend the javaScript can verify that the image the same as the input eg 01img = Myinput

- security problem, javascript can be searched

 

2. imageNumber can be varified by php that imageNumber corresponds to Myinput

- cant see anyproblems with this so far

 

Anyone done this before, any infomation on this sort of thing would be appreciated, thx

[AndyB]

Sessions are better than javascript (which may not be active for every user)

 

www.digitalmidget.com/php_noob/captcha.php might give you some insights into how I addressed the issues.

[rickyj]

Thanks, unfortunately I doubt my server has the php GD2 library (im not hosting this one myself).

 

$_SESSION[] looks like a good idea to implement though : http://uk3.php.net/function.session-register