I suggest we use Google's nocaptch ReCaptcha, it's not only using hard problems to solve, but also browsing history & browser fingerprint and more to stop bots.