Webmasters Stack Exchange is a question and answer site for pro webmasters. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an issue where a form on my site is getting spammed. The form is actually a copy paste job from a CRM, so I cannot access any of the server side script to make a good human checker.

In the interim I have made a very simple JQuery checker.

My question is, do spam bots load the DOM thus triggering the JavaScript checker?

share|improve this question
Depends on the bot.... some use browsers, some command-line and either of them can support JavaScript. – Simon Hayter Apr 4 '14 at 7:16
up vote 0 down vote accepted

Generally the answer is still no. There are apps nowadays like PhantomJS that make it easier for an automated program to run a browser including JavaScript, however, they are typically slower.

It's often much easier to scrape HTML and send direct POST requests. If a bot has problems on one site (e.g. a CAPTCHA) it will just move onto another.

So if you have no access to the server side code, you might be out of luck. If the form is being sent to your email perhaps a better spam filter on your email is a good defense.

share|improve this answer

It might already be too late to use this idea since the spammers already know about the form: leave out a critical piece of your form (like the action attribute) and populate it using javascript when the document is loaded. Do tell visitors that the form doesn't work if javascript is disabled and remove this message when the form is set up correctly.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.