Very true. I used a similar method after my experiments, using JavaScript to fill in a textbox (and degrading gracefully to a simple CAPTCHA for users without J

Very true. I used a similar method after my experiments, using JavaScript to fill in a textbox (and degrading gracefully to a simple CAPTCHA for users without JS). The CSS/mod_security trick wouldn't have been as effective with WordPress since some of the bots don't actually parse the form and would submit the form without the confirm_email field.