I recently had to add a 10 second period where the contact form send button is disabled but appears to still work. There was daily contact form spam coming fro

I recently had to add a 10 second period where the contact form send button is disabled but appears to still work. There was daily contact form spam coming from tor exit nodes. Only flaw is that it always sends the message within 7 seconds. That is faster than a human could get to the form and type a meaningful message. So I was able to avoid blocking tor exit nodes by adding this timeout. This has solved the issue, for now. Requiring JS execution by only accepting JSON stopped the lazier bots.