Interesting. I am implementing a captcha for a client who is ridiculously flooded with porn spam. But I bet once I bring up the issue of accessibility we will re-think the solution. I like the math concept.
I have another client who insisted against my recommendations that he wanted a string-based defense. He couldn't have any sort of user roadblock. So I built a little bit that queries a db, loops ofver it and compares each stored forbidden string against form input. If there is a failure I return a 500 error via cfheader. The string he chose to do most of the work is "http://". To my surprise he reported that he has basically stopped every bit of form spam thanks to this one element. -- [EMAIL PROTECTED] Janitor, MSB Web Systems mysecretbase.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting, up-to-date ColdFusion information by your peers, delivered to your door four times a year. http://www.fusionauthority.com/quarterly Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:260334 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

