With time your form becomes an objective of people or programs intended to try SPAMMING using your form. With the right form data validation they won't be spamming from your form to people, but you can conclusion a getting of randomly junk form submissions you.? CAPTCHAA visual CAPTCHA can be used for a useless posts separation. CAPTCHA is the bitmapped image with well known numbers and/or letters. But there are specific issues used in the visual CAPTCHA and unless you've got a high-volume website you should try using simple checks instead. Quite possibly W3C suggests using varied possibilities and approaches.? The simple alternativeBut for people with a high-volume website you can test to use a uncomplicated text confirmation code. By way of example, look our contact us page in which the "Access code" is a hassle-free text string like "MYCODE". All exactly what you need is an input field along with a PHP code to check the entered code. We have found an example code for that HTML form: Access signal: < input /> Be sure to enter < b > MYCODE< and b> above. Then you are able to simply the check if your entered code matches, by using a PHP help. Please, compare the code in lower-case in avoiding issues with a typing for fear that SeNSiTiVe code: If (strtolower($_POST['code'])! = 'mycode') die('Wrong access code'); The form will be submitted only following the time, when the person enters the right access code.? This is actually too easy and ineffective, isn't it? You can say that this is easy way and spammers will likely not have any problems typing within the access code. But keep in mind two things: The the majority of spammers use automated systems ("spam-bots"). While you have a high-traffic web-site with lots of users it is most unlikely that anyone will create "spam-bots" to learn to read and post your specific access code just to send SPAM to 1 user. If SPAM in your form is supplied by an actual human no matter whether you are use Captcha considering that this person can look over it, that's why regardless of the security level it seems to have. Luckily SPAM provided by human is really a very rare event, this type of person too lazy and get preference to program spamming on the large scale. If your form is getting spammed, please try this process at first, instead of the visual Captcha, you will be surprised by the effectiveness of this method. For the people you ought to provide more secure, here it is some methods you can try it: Access the code changing occasionally. Access the code on some other sort of page placing, not the main the form is on. For example instead from as suggested abovePlease provide MYCODE above. Please, write such as this: You will discover Access code on your "about us" page. Please place something like this upon your "about us" (or some other) page of your respective website: Access code for the contact form is MYCODESuch manner you separate the access code in the form and it helps make even less sense for everyone to create spam-bots to target your website specifically. This may be a good alternative to Captchas, it's possible you'll try it. Later you can search other methods if it doesn't meet your needs. Learm more about php type.