Captcha Check Problem When $formId Is Given about captcha

[laimisf]

Also, when validation is executed, all 'captchaHash' session array is forgotten, instead of forgetting only one single array element on which check was executed.
Why not to do Session::forget('captchaHash.' . $formId) in check() function instead of forgetting all array elements, like now (Session::forget('captchaHash')?

One more thing, check() function could have $forgetSession parameter by default set to 'true', like check($value, $formId = null, $forgetSession = true). In this way, people could use this function for captcha check via AJAX and not forget the session that inner script validation could pass.

Edited function proposal:

public function check($value, $formId = null, $forgetSession = true)
    {
        if (!$formId) {
            $formId = hash('sha256', URL::previous());
        }
        $captchaHash = Session::get('captchaHash.' . $formId);
        $result = $value != null
            && $captchaHash != null
            && strlen($value) === $this->config['length'] // must be of the same length right?
            && $this->hashCheck($value, $captchaHash);
        // forget the hash to prevent replay
        if($forgetSession) Session::forget('captchaHash.' . $formId);
        return $result;
    }

[toplan]

uhh...I think if couldn't pass via AJAX, should create a new captcha code and return the img data back to browser!

[toplan]

if( ! $result || ! \Request::ajax() ){
            // forget the hash to prevent replay
            Session::forget('captchaHash');
 }