4 ms·

If that's the type of bot you're targetting, then there are better, simpler methods which don't involve having to make the user jump through hoops. Example: ht

If that's the type of bot you're targetting, then there are better, simpler methods which don't involve having to make the user jump through hoops. Example: https://secure.grepular.com/Blocking_Comment_Spam_Using_ModSecurity_and_Hidden_Fields https://secure.grepular.com/Blocking_Comment_Spam_Using_ModS... That trick blocks bots from posting comment spam on my blog every single day, and it hasn't failed once since I started using it months ago.

paulgb 16y ago
Very true. I used a similar method after my experiments, using JavaScript to fill in a textbox (and degrading gracefully to a simple CAPTCHA for users without JS). The CSS/mod_security trick wouldn't have been as effective with WordPress since some of the bots don't actually parse the form and would submit the form without the confirm_email field.