https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41548 Bug ID: 41548 Summary: Unauthenticated request captcha is only validated after optional workflow steps Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: ILL Assignee: koha-bugs@lists.koha-community.org Reporter: pedro.amorim@openfifth.co.uk QA Contact: testopia@bugs.koha-community.org CC: lisette@bywatersolutions.com, pedro.amorim@openfifth.co.uk, tomascohen@gmail.com To reproduce: 1) Enable ILLModule, ILLOpacUnauthenticatedRequest and ILLModuleDisclaimerByType by pasting the sample value from the pref description. 2) Place an unauthenticated request, log out and visit: <opac_url>/cgi-bin/koha/opac-illrequests.pl?op=create&backend=Standard 3) Enter the mandatory fields, pick a type other than Journal article 4) Purposely enter the captcha wrong e.g. 123 5) Notice you're shown the type disclaimer step. Submit that. 6) Notice you're shown the form with the message: "You typed in the wrong characters in the box before submitting. Please try again." Step 6 should happen before step 5. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.