Question

All,
I have a guestbook feature on my site and I keep getting spammed. I’m doing validation on the front end with the jquery validator and asking a math question to ensure it’s not a spamming tool. I also have a hidden field that generates a random number (a Form Key) in my POST request.

On the backend I verify the form key and I also check the values against some select words function and I also say if isset($_POST). I still keep getting spammed pretty bad and not sure how I can avoid this anymore. Other then making people register for the site, how can I prevent all the spam? Any additional suggestions are greatly appreciated!

Answer 1

1. Use a better captcha such as Re-Captcha by Google.
2. Create a honey pot field that you hide with CSS. Bots typically fill in all fields, so if this hidden field is filled in, you know it’s a bot.