Solution - 1

Hello, Check the following url. It describes a method for avoiding spam. http://www.returnondigital.com/blog/how-to-sto-form-spam-without-using-captcha Your code would be like this after implementing it

<form id="ff" method="post" action="<?php get_template_directory_uri(); ?>/wp-content/themes/Mag/scripts/insert.php">
  <div>
    <label> <span>Name*:</span>
      <input type="text" placeholder="Please enter your name" name="name" id="name" required />
    </label>
  </div>
  <div>
    <label> <span>Phone:</span>
      <input type="text" placeholder="Please enter your phone" name="phone" id="phone" />
    </label>
  </div>
  <div>
    <label> <span>Email*:</span>
      <input type="text" placeholder="<a rel="nofollow" href="/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="93eafce6e1f6fef2faffd3f4fef2faffbdf0fcfe">[email protected]</a>" name="email" id="email" required />
    </label>
  </div>
  <div>
    <label> <span>Message*:</span>
      <textarea rows="3" cols="1" placeholder="Message" name="message" id="message" required ></textarea>
    </label>
  </div>
  <input id="this_title" type="text" name="this_title" value="" />
  <input class="sendButton" type="submit" name="Submit" value="Send" />
</form>
<style>
#this_title
{
	display:none;
}
</style>

<?php
$this_form_spam = $_POST['this_title'];

if ($this_form_spam == "")
{
	// Get values from form
	$name=$_POST['name'];
	$phone=$_POST['phone'];
	$email=$_POST['email'];
	$message=$_POST['message'];
	
	$to = "<a rel="nofollow" href="/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="a3c6cec2cacfc2c7c7d1c6d0d0e3dac2cbcccc8dc0ccce">[email protected]</a>";
	$subject = "Potential Client Lead";
	$message = " Name: " . $name . "\r\n Phone: " . $phone . "\r\n Email: " . $email . "\r\n Message: " . $message;
	
	
	$from = "FirmFlip";
	$headers = "From:" . $from . "\r\n";
	$headers .= "Content-type: text/plain; charset=UTF-8" . "\r\n"; 
	
	if(@mail($to,$subject,$message,$headers))
	{
	  print "<script>document.location.href='/thanks/';</script>";
	
	}else{
	  echo "Error! Please try again.";
	}
}
else
{
// mock and laugh in the face of spam
}

?>

Solution - 2

Hi, Are you using custom code for contact email. You can use some plugins to do this job. Contact form 7 is a good one with nice rating. Uou can configure it easily. I think your problem will solve with this plugin. Please check it and update me. Thanks

Solution - 3

check these two links http://webdeveloperplus.com/php/integrate-customized-recaptcha-in-your-php-application/ http://www.abeautifulsite.net/blog/2011/01/a-simple-php-captcha-script/

Solution - 4

If you don't want to use any plugin you could add an extra value to the links on your page that lead to this contact form. In the contactform add that value to a hidden field. In the mail file check whether or not that hidden field value is present. If it is not present someone accessed the contact form directly instead using a link on the website, which often means it is a bot. It won't make it Fort Knoxx though.