Are there best practices for implementing spam prevention measures in PHP contact forms?

Spam prevention measures in PHP contact forms are essential to reduce unwanted messages and protect the website from malicious activity. Some best practices include implementing CAPTCHA, honeypot fields, input validation, and IP address blocking. 

// Example of implementing CAPTCHA in a PHP contact form

session_start();

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    if ($_POST["captcha"] != $_SESSION["captcha"]) {
        // CAPTCHA verification failed
        // Handle the error or display an error message
    } else {
        // CAPTCHA verification passed
        // Process the form submission
    }
}

// Generate a random CAPTCHA code
$captcha = substr(md5(uniqid()), 0, 6);
$_SESSION["captcha"] = $captcha;

// Display the CAPTCHA image in the form
echo "<img src='captcha.php?code=$captcha' alt='CAPTCHA'>";
echo "<input type='text' name='captcha' placeholder='Enter CAPTCHA code'>";

Keywords

spam prevention PHP contact forms CAPTCHA honeypot validation

Related Questions