How can session variables be properly set and stored when generating a captcha image in PHP?

To properly set and store session variables when generating a captcha image in PHP, you can create a unique token for the captcha code and store it in a session variable. This token can then be used to validate the user input when they submit the form with the captcha code. By storing the token in a session variable, you can ensure that the captcha code remains secure and cannot be easily bypassed. 

<?php
session_start();

// Generate a random captcha code
$captchaCode = substr(md5(uniqid(mt_rand(), true)), 0, 6);

// Store the captcha code in a session variable
$_SESSION['captcha_code'] = $captchaCode;

// Create an image with the captcha code
$im = imagecreate(100, 30);
$bg_color = imagecolorallocate($im, 255, 255, 255);
$text_color = imagecolorallocate($im, 0, 0, 0);
imagestring($im, 5, 10, 5, $captchaCode, $text_color);

// Output the image
header('Content-type: image/png');
imagepng($im);
imagedestroy($im);
?>

Keywords

session variables captcha image PHP set store

Related Questions