Bug 830641

Summary: Users can successfully register with mismatching captcha.
Product: OKD Reporter: mcao
Component: WebsiteAssignee: Clayton Coleman <ccoleman>
Status: CLOSED NOTABUG QA Contact: libra bugs <libra-bugs>
Severity: low Docs Contact:
Priority: unspecified    
Version: 2.xCC: szhou
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-06-11 19:23:45 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
the register shown as the picture can be registered successfully. none

Description mcao 2012-06-11 05:10:10 UTC 
Created attachment 590817 [details]
the register shown as the picture can be registered successfully.

Description of problem:

When I register in the register page, I input correct email,password. but a wrong captcha which is a little diffrence with the given one (the captcha given is "and rnchgo" ,and I inputed "ann..rnchgg"). It turns out to be a successful page and I can receive the email to confirm.

Version-Release number of selected component (if applicable):

devenv_1827

How reproducible:randomly


Steps to Reproduce:

1.Go to openshift register page.
2.Input a valid email and valid password
3.Input a captcha which is a little dismatched with the given  captcha. (For example,if the given captcha is "freedom homendsh" ,you could input "freedo..homendsa");
4.Click "Sign up".
  
Actual results:

It will register successfully, and I can receive a letter to confirm.

Expected results:

It should be left on the register page with error message like
"Captcha text was Incorrect, please try again".

Additional info:

This issue exists on devenv_1827, stg.openshift.redhat.com, and openshift.redhat.com
Comment 1 Clayton Coleman 2012-06-11 19:23:45 UTC 
Google is fairly flexible about what the user enters if the whitespace appears to be correct.  Since the implementation of the captcha is completely google defined, our tests merely need to validate that incorrect captchas force the user to refresh the page.