How to distinguish comment and/or email spam from the real thing:
#!/usr/bin/perl
use strict;
use CGI qw( :standard );
my $server_name = server_name();
my $referer = referer();
my $is_spam = $referer !~ /$server_name/;
Server name not in referer
No TrackBacks
TrackBack URL: http://www.kiffingish.com/cgi-bin/mt/mt-tb.cgi/177
The Referer field can be changed to anything you like, so the "security" isn't there.
True, but for this case it seems to work very well. Not all spammers are as knowledgable as you.