Symphony.

Hi Stuart. I am not using JS validation.

What I meant was that it seems as if the spammers bypass the Can of Spam validation (happens in Symphony Event logic, not JS). If this is the case I find it worrying.

Besides from this potentially worrying (security?) issue (but it might be something else) there's the practical issue of me getting too much spam. This is why I'll add a simple (non-JS) honeypot approach and see how that works.