Markus Wild wrote:
One that is less cumbersome than the "type in the word in the weird image" approach is to set a cookie-like hidden parameter from the server when it generates the form (I'm assuming php or perl behind
Well, IMHO this is no better than my solution using JS What do you do if someone has cookies disabled?
I said "cookie-like", not cookies:
<input type="hidden" name="yourgrandmother" value="some encrypted hash">
with "some encrypted hash" being some encrypted (and binhex64 encoded) serialized record containing the sending IP, a timestamp and whatever else you fancy including.
Cheers, Markus