The blank page obtained after a captcha is clearly a missing `header()` redirect when it gets confirmed (near the end of that script).