[PHPBB3-14241] Security bug into Spambot control Questions

XML

Word

Printable

Spambots can avoid control question.
phpbb/captcha/plugins/qa.php
find

   function validate()

      global $config, $db, $user;

      $error = '';

      if (!sizeof($this->question_ids))

         return false;

Must change to

   function validate()

      global $config;

      $error = '';

      if (!sizeof($this->question_ids))

         $error = "Wrong question confirmation";

         return $error;