@hanno the hidden field method in combination with timer that starts when when the page is loaded is already protecting massive against most bots.