Image missing on HTTPS? Test block pages

The captcha does not normally appear. It will only appear if the plugin thinks the user is a spammer.

To test, uncheck “Automatically add admins to Allow List” under protection options. Save

Clear the cache.

Remove your IP address from the Allow list under Allow Lists.

Now the plugin doesn’t know you aren’t a spammer.

Now log off. go to the site.

Leave a comment with the word BLACKJACK in the comment.

The plugin will think you are a spammer and show you the captcha.

OR

Ask someone who has a different IP address to test it for you and tell you if they see a captcha when they use the word BLACKJACK in the comment.

Keith

Wow, you’re very fast, thank you!

We seem to be getting a couple of allow requests per day and some of them are saying they can’t see the CAPTCHA image so I wanted to check it out for myself.

Thanks again

So it looks like if you use OpenCaptcha, the images don’t load over HTTPS. This is a problem for anyone that forces their wp-admin to HTTPS, like we do. You might want to add a message letting folks know. I switched to Google’s Recaptcha and it’s loading now.

Thanks again!

Thank you,

I will research making Open Captcha work through HTTPS.

If the fix is simple, I’ll include it in the next release.

Keith

That would definitely be helpful. Even just a warning on the CAPTCHA options would be helpful (since you can check for FORCE_SSL_ADMIN).

I have changed the code to grab the image using http under the covers and display it using https on the page. No more warning messages from mixing secure and insecure content.

I will place it on Blogseye.com for beta in a moment and if I don’t generate any errors I can submit to WordPress.

Keith

That’s great, Keith, thank you.

I’m going to look into contributing to your plugin, I’d love to be a part of helping to make the web deal with less spam!