I spent a little while looking for a decent captcha module for php. In the end I found that Cryptographp does it for me. Firstly – it was about the only one I found that uses squiggly type fonts by default (straight fonts are surely to easy to crack). It would be nice if it worked with E_ALL error reporting though, I had to hack that myself.