The spam bots hit my sendmessage.php...

[Dean C]

Make an extra field in the template for the sendmessage.php:

<input type="text" name="comments_" value="" class="omgzwtfbbq" />

Then somewhere in sendmessage.php where it accepts the incoming post call to send the email put:

PHP Code:

if($_POST['comments_']) { exit; } 


In the extra CSS box when editing a style's css put:

.omgzwtfbbq { display:none; }

The logic behind this method is that the spambot can't tell it's a hidden field unless it's smart enough to check the corresponding CSS class. Therefore it'll fill it in and you can check within your PHP script to see that it's been filled in and hence exit the script before sending out the email. Some spambots are smart enough to refer back to the appropriate CSS but this'll stop 90% of the incoming spam.