Add new comment

So clients with javascript are okay and those without javascript are spammers?
Then you might want to use a better javascript detection than using cheap pipe.
After all, that blob of javascript is just as easy to parse (and submit) for a bot as the original form.