in the plugins/form_message file, the code that generates the captcha image:
<img src="../webassist/captcha/wavt_captchasecurityimages.php?field=Security_2&font=fonts/MOM_T___.TTF" alt="Security Code" class="Captcha" />
also sets the mname of the captcha session through the field querystring parameter.
the captcha session naming convention is:
captcha_<FieldQuesrtystring>
in th is case ht efiled questystring:
field=Security_2
is equal to:
Security_2
so the captcha session is:
captcha_Security_2
in the validation code:
php:
$WAFV_Errors .= WAValidateLE((strtolower(isset($_POST["Security"])?$_POST["Security"]:"")) . "",((isset($_SESSION["captcha_Security"]))?strtolower($_SESSION["captcha_Security"]):"") . "",true,5);
you are using a session named captcha_Security instead, change that to:
php:
$WAFV_Errors .= WAValidateLE((strtolower(isset($_POST["Security"])?$_POST["Security"]:"")) . "",((isset($_SESSION["captcha_Security_2"]))?strtolower($_SESSION["captcha_Security_2"]):"") . "",true,5);
