Honeypot is a simple technique to catch automated bots that submit your form. A honeypot is a hidden field that bots will fill out but not humans.
Below is an example of a form with a honeypot field. The field is hidden by using the display: none
style. Real users will not be able to see or interact with this field. For brevity, this example uses an inline style, however, it's recommended to include this in a CSS file. You should also avoid naming the input with a name that makes it obvious a honeypot field.
<form action="https://postform.com/s/FORM_ID" method="POST">
<div>
<label for="name">Name</label>
<input type="text" id="name" name="name" />
</div>
<div>
<label for="email">Email</label>
<input type="email" id="email" name="email" />
</div>
<!-- Honeypot field -->
<div style="display: none">
<label for="website">Website</label>
<input type="text" id="website" name="website" />
</div>
<button type="submit">Submit</button>
</form>
Postform just needs to know the name
of your honeypot input. When your form is submitted, if this field has a value, it will be marked as spam.
Using the HTML form above as an example, the plugin would be configured to use website
as the input name.