Please note: This captcha will be generated when the img tag requests the captcha-generation (= a real image) from YOURURL/register/showcaptcha. As this is a client-side triggered request, a $_SESSION["captcha"] dump will not show the captcha characters. The captcha generation happens AFTER the request that generates THIS page has been finished.