Had the opposite experience - was running a wordpress site and picked up a lesser known anti-spam plugin. AFAIK the only thing it did was run a tiny bit of obfu

Had the opposite experience - was running a wordpress site and picked up a lesser known anti-spam plugin. AFAIK the only thing it did was run a tiny bit of obfuscated js to fill an invisible field. Never had a single spam comment again for over 6 years (sorry for no-js users tho). _edit_ Just looked it up - it actually used to have a no-js backup and still worked wonders. Sadly seems it has turned into bloatware since I last used it, but the FAQ goes into detail how it works. https://wordpress.org/plugins/anti-spam/ https://wordpress.org/plugins/anti-spam/ Basically 1. extra field that you have to enter the current year (hidden and filled by js for most users) and 2. extra hidden url and email fields that bots tend to autofill.