How I Reduced Contact Form Bot Spam Without Adding CAPTCHA
I wanted to reduce automated submissions on the Cordinant contact form without making every visitor complete a CAPTCHA. The solution became a combination of small server-side checks: CSRF protection, a honeypot, submission timing, validation and rate limiting.