the action of the form is set to post to the quote-thankyou.php page.
when working with forms, always keep the following rule in mind:
All Form Processing MUST occur on the page specified as the action.
in this case, you need to apply the server validation behavior to validate the captcha input on the quote-thankyou.php page.
see this page for more details on adding server validation:
http://www.webassist.com/tutorials/Add-server-validation-to-your-web-forms
as for the captcha image not showing up on the server, when i right click the captcha placeholder and selct open in a new tab, it brings me to a page not found error:
http://webimpact.com.au/test/webassist/captcha/wavt_captchasecurityimages.php?width=100&height=30&field=Security_Code_1&bgcolor=FFFFFF&transparent=0&bgimage=&gridfreq=20&gridcolor=000000&gridorder=behind&noisefreq=20&noisecolor=000000&noiseorder=behind&characters=5&charheight=&font=fonts/MOM_T___.TTF&textcolor=000000
this indicates that the files from the webassist/captcha/ folder have not been uploaded to the server.
