Because captchas are not perfect and it is not always that bots will register in the website.
Here's a link for you to read. http://www.shieldsquare.com/sorry-google-captcha-recaptcha-doesnt-stop-bots/
Honestly though, captchas are the least of a site owner's worries. What really needs to be put into attention is if the form submission was submitted via the actual website or was it fiddled on someone's local computer and attempted to submit the form. This could also be done using a different website.
Let's say I have a website called domain.com and I copied & pasted all of Facebook's HTML codes onto my website, changed a few things to target and store data into my website, but it looks legit like Facebook's website. Then when said user goes and enters in data. Oh look, now their actual Facebook account has been hacked. I wonder why? It's because the average Joe doesn't care about where the website or target is located. The average Joe doesn't know a thing about security. All they know is that if the website looks like the website they normally go on, then it's legit.
This could also be a back door to manipulating features that aren't supposed to be there. Let's say I "had" access to an admin panel, but I don't anymore. If I saved the admin panel. I could potentially modify what I like and submit the form. If the form has horrible codes, I could actually get into it without a problem and change what I like.
Now I know that codoforum is a 3rd party software, but people actually need to start thinking like a real PHP developer instead of going the easy route and putting the burden on their users. I wonder why Facebook took out their captchas........ Facebook has no captchas whats so ever. I had a friend who spammed my message about 900 times. He got banned from sending messages for an hour straight. Did he get thrown a captcha? No. When I signed up for 13 Facebook accounts. Did I get thrown a captcha? No. And you wonder why Facebook of all websites is the most popular social media sites out there.
> Because captchas are not perfect and it is not always that bots will register in the website.
Here's a link for you to read. http://www.shieldsquare.com/sorry-google-captcha-recaptcha-doesnt-stop-bots/
Honestly though, captchas are the least of a site owner's worries. What really needs to be put into attention is if the form submission was submitted via the actual website or was it fiddled on someone's local computer and attempted to submit the form. This could also be done using a different website.
Let's say I have a website called domain.com and I copied & pasted all of Facebook's HTML codes onto my website, changed a few things to target and store data into my website, but it looks legit like Facebook's website. Then when said user goes and enters in data. Oh look, now their actual Facebook account has been hacked. I wonder why? It's because the average Joe doesn't care about where the website or target is located. The average Joe doesn't know a thing about security. All they know is that if the website looks like the website they normally go on, then it's legit.
This could also be a back door to manipulating features that aren't supposed to be there. Let's say I "had" access to an admin panel, but I don't anymore. If I saved the admin panel. I could potentially modify what I like and submit the form. If the form has horrible codes, I could actually get into it without a problem and change what I like.
Now I know that codoforum is a 3rd party software, but people actually need to start thinking like a real PHP developer instead of going the easy route and putting the burden on their users. I wonder why Facebook took out their captchas........ Facebook has no captchas whats so ever. I had a friend who spammed my message about 900 times. He got banned from sending messages for an hour straight. Did he get thrown a captcha? No. When I signed up for 13 Facebook accounts. Did I get thrown a captcha? No. And you wonder why Facebook of all websites is the most popular social media sites out there.