I have also had decent luck with the hidden form field. In your form, put an input type="text" in a div that is display: none, so the field isn't technically hidden, but a human won't see it, and then call the field something like name="lastName", something that a bot will always fill out. (Example works in a form that does not also have a 'real' form field called "lastName", of course.) Then on submission, server-side, CFIF len(form.lastName) then bail out and don't process the results at all.
CFFORMPROTECT is much more robust, of course, covering several different bot / hack angles, but I often use the non-displayed form field as a quick, lightweight filter. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:323083 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
