It works fine except it doesn’t refresh after sending the post. I’ve tried with more browsers with no luck. It changes only when a new session is created.
From what I have seen, it will give you the same one over and over again until you have typed it in correctly. Then when you go to the page again, will you see a new one.
No, it doesn’t change. The user submits the form and the captcha doesn’ change. With a simple PHP script anyone could send the form thousands of times just knowing the captcha.
That’s it. I wasn’t using validation because it’s a contact form and there’s nothing to save in the DB. I knew something about the need of a validation but I thought it was the captcha validation itself, not the model one.
It’s actually $model->validate() because $this is a Controller instance.