Issue #1024370: only use $form_state['captcha_info'] cache after submission (e.g. comment/node previewing) On some forms $form_state can be cached across requests, and the CAPTCHA info in there should not be used during form building before submitting.