I'm getting a lot of spam om my websites where I have a couple of email/contact forms.
The forms are all validated/submitted inline with jQuery/ajax.
However, spam bots skip javascript so I want to validate the form natively too.
I don't want to use a (hidden) CAPTCHA.
EE/CI can validate emails and numbers etc. But I have a phone number field for example and I don't want to force users to use a specific pattern 000-000-000 etc. I just want to allow only 0-9 spaces and dashes and (). At the moment spam bots put anything there.
Also, I have a name field which spam bots use to put email addresses in. So I would like to disallow the @ sign and other symbols that no one uses in their name.
Also I don't want to even accept html tags or common spam strings like "
How would I do this without javascript?