:::: MENU ::::

Thursday, June 18, 2009

CAPTCHA HttpHandler Path

This release of BotDetect includes the ability to change the full CAPTCHA HttpHandler request path. It is recommended to change this path to a unique value for each of your applications, since that can improve the CAPTCHA security.

For example, if a bot tries scanning many websites for the default LanapCaptcha.aspx path, it becomes slightly more difficult to automatically recognize your site as using BotDetect CAPTCHA protection.

To change the BotDetect CAPTCHA HttpHandler path to CustomCaptchaHandler.ashx (for example):

  • Add the following lines to the <appSettings> section of the web.config file:
  • <appSettings>
  •   <add key="LBD_RequestPath" value="CustomCaptchaHandler.ashx" />

</appSettings>

  • Update the HttpHandler registration in the <system.web> section of the web.config file:
  • <httpHandlers>
  •   <add verb="*" path="CustomCaptchaHandler.ashx"

    type="Lanap.BotDetect.CaptchaHandler, Lanap.BotDetect

 

http://captcha.biz/asp.net-captcha.html