freak auth light captcha security problem

[eluser]alectrash[/eluser]
I managed a way around the problem. I get captcha value from session data and store it in an extra field in sessions table. I then check posted captcha against value in db.

Code:

$this->db_session->userdata('FreakAuth_captcha')

wasted 3 hours doing this though. sigh...