|
If you're looking to do something custom then have a peek at your apache logs. I've found 95%+ of the spam signups load then post the registration form in the same second, which is clearly impossible for a human. Either code some sort of time check so that a registration is rejected if the difference between load-submit is too low, or set up something to scan the logs and blacklist IPs (which won't stop the current signup, but it may prevent future attempts)
|