Sorry about the typo - as you say a missing }
The bot almost certainly does not use your form, but a cached version of it. You must validate on the server.
Have a look at
which shows how to use hidden trap fields.
All the code given in this post has been tested and is intended to address the question asked.
Unless stated otherwise it is not just a demonstration.
Last edited by Philip M; 03-14-2013 at 02:03 PM..