[pettycashstash2]

Thanks for the suggestions! About simple custom captchas, they are easily bypassed but effective enough for smaller sites. I've got the honeypot field running now and am monitoring how well it catches bots. The email verification should be the strongest barrier of the bunch. Between those two plus the basic captcha, hopefully that covers most automated spam without being too annoying for real users. Curious to see the results over the next week or two.