On Thu, 2021-05-20 at 21:29 +0200, tastytea wrote: > > A good measure against non-targeted spam is a hidden input field with > the name “url”. If the bot put anything in that field, throw it out.
And be sure to put a paragraph of (hidden) explanatory text above it so that blind users with screen readers don't attempt to fill it in. Another efficient trick is to change the "Submit" button to "Preview", and have the real submit button visible only on the following page -- while they're looking at the preview. Most bots aren't smart enough to follow the result of the first "click." For bonus annoyance, you can add a "Cancel" button before the "Send" button; most bots just use the first button on the form without regard for what it does.
