Security once a user is logged in?
Just a quick question on this...
I've used SA to set up pages for people to register and login to a site, with CAPTCHA on the registration and forgot password pages.
Is it safe enough not to use things like CAPTCHA on pages where a user is logged in, e.g. an Update Profile page, or would it still be advisable / best practice to use CAPTCHA on those pages too?