Super Captcha

Latest Version: 2.4.2

The new Super Captcha 2.3.0 introduces the latest CAPTCHA technology: 3D CAPTCHA! This type of captcha requires human intervention by forcing the use of linear recognition algorithms that only the human mind can decipher! This plugin was developed primarily for the WordPress Muti-Site, however it works on the regular single domain version as well. It combats spam bots from flooding you with sign-ups and blog creations and it keeps bots from brute- force attacking your site with the admin username by forcing a visual confirmation CAPTCHA in order to login.  Some say that this software is completely mislabled because it provides so much more than just a CAPTCHA for a WordPress MU install, it actually provides security on multiple levels against spamers, hackers, and bots.  As of 2.2.0, Super CAPTCHA supports BuddyPress.

SECURITY METHODOLOGY:

This software starts by ensuring that no one but the super-admin has access to the core functionality and that it cannot be edited in a web-browser (by disabling the plugin editor for this file).  Then it allows the admin to determine where they want the plugin to act; the login page, the registration page, or the comments page.  From here, the plugin is now guarding the multi-user install and starts by ensuring that each and every submission passes the human-test.  Some bots out there are able to pass these tests by reading an image several times and being able to determine the method in which the image is generated, then be able to find the edges of the letters and interpret them so it can submit it in the next post.  We stop this by ensuring that anyone that fails after the first 3 tries cannot try again for 24 hours from that IP address.  We also ensure that each image is UNIQUE by randomizing every aspect of the image, from the font colors, text tilt and angles, transparency, background noise, arcs, and even the font and text size themselves making it virtually impossible in 1,000 attempts for a bot to learn any method of rendering.  We don’t stop there, the system also checks to ensure that the person submitting the form was actually refered from the registration form.  Most bots supply false referral data or no data at all, this completely keeps them from submitting the forms.  We also log every failed attempt in the MU system and smartly lets you know if one of those failed attempts was able to create an account elsewhere on your site and allows you the quick option to spam or ban the user account that has been created.