Captcha / Validation

I recently added (yesterday) captcha to this clients form including validation and a show if. This morning 3-4 spam form submissions were still able to go through. Could you please review my programming to tell me if the captcha and validation have been done correctly? Relevant files are attached. Thank you.

It looks like it is added properly. Are you able to submit the form without a valid captcha value?

No, the form will not submit unless the captcha value is entered properly. We have a few clients that are getting hit pretty hard with spam submissions. We have an additional few that have captcha in place and are not getting the spam submissions. With that being said, we are putting captcha in place on the ones that are having the problem, however, this one is still getting approx. 4-8 spam submissions a day. Prior to captcha being added, they were getting a dozen or more a day so I can certainly see the difference, however, it is still happening.

You can try:

1) adding the security question field as well as CAPTCHA... it asks questions like "is lava hot or cold?" and it is actually harder to get through than a CAPTCHA field.
2) Require login for submission. No bots can get past a login. Then you would only potentially get submissions from people that go through registration and login to send the message.

Thanks Ray, could you give me a quick walkthrough on the security question suggestion. I'm not sure that I know how to do that? Are you suggesting to replace captcha with a security question instead? Thanks for your help!

You could try it instead or on top of your existing validation. Can I get FTP access and a URL to reproduce? There is no direct access to the security question field outside of form builder, so it is probably easiest for me to just add it for you and you can test to see if it accomplishes the required result.

Please see private info

The FTP information provided doesn't seem to work. Please test to make sure there are no typos and that there aren't IP restrictions that would block my access.

sorry about that, let's try this...sometimes Godaddy will accept an FTP address or an IP address (for the FTP). I think this one connects using an FTP address I've listed the info in a Private message. Thanks again!

I've added the simple question field. Hopefully that will help with preventing spam.