Simple CSS/PHP AntiSpam solution for a contact form

[DivaVocals]

I do use it to fill out the common form stuff, name, email, etc.
Not saying it auto submitted the form, but How do I know if filled out a hidden field?

autocomplete=off is often used on CC # fields and is a good solution.

It depends on how the form handler is setup to deal with the hidden fields.. But if you have an auto-filler that is filling out hidden fields I'd be concerned about using this auto form filler.. It means it's behaving like the bots this solution is meant to defeat..

[DrByte]

auto-fill is EASILY defeated by adding autocomplete="off" to the form markup for the various form fields.

autocomplete=off is often used on CC # fields and is a good solution.

... and is also what's used in the upcoming v1.5.1

[bypill]

It's built-in to the core files (not addons) of the next release of Zen Cart.

Bad news for simple css/php antispam solution! It was broken by spammers and bad bots:
178.141.109.199
94.181.194.59
94.181.240.194
94.181.230.46
94.181.196.252
173.242.118.223
94.181.230.46
94.181.223.202
91.201.64.223
37.112.225.158
37.112.234.221
37.112.236.133
37.112.226.0
......

[DrByte]

It's no magic pill.

[DivaVocals]

Bad news for simple css/php antispam solution! It was broken by spammers and bad bots:
178.141.109.199
94.181.194.59
94.181.240.194
94.181.230.46
94.181.196.252
173.242.118.223
94.181.230.46
94.181.223.202
91.201.64.223
37.112.225.158
37.112.234.221
37.112.236.133
37.112.226.0
......

and regular CAPTCHAs can also be defeated.. They are not magic bullets.. they are deterrents which work MUCH MORE often than they fail..

[torvista]

In addition to the honeypot field I also added a timer to my contact us/ask a question forms...if the form is submitted too fast (like 3 seconds) I treat it as spam.

[mcpisik]

In addition to the honeypot field I also added a timer to my contact us/ask a question forms...if the form is submitted too fast (like 3 seconds) I treat it as spam.

Is that easy to do?

[lankeeyankee]

In addition to the honeypot field I also added a timer to my contact us/ask a question forms...if the form is submitted too fast (like 3 seconds) I treat it as spam.

Can you please post your timer code here so we can try it? This was working great for us, now in the past 2 or 3 days we are getting spam when we have never gotten a single one since implementing this. I wonder if that's because it was added to the core and has gotten the attention of spammers now?

[torvista]

I'll post the timer code asap...

[lat9]

Would another obfuscation help here? What if there was a database setting that held the name of the "honeypot" field so that the name could be customized? That way, each store could have a unique input field name and, if the name was discovered and spam began arriving, it could be changed via the admin's console.