Do not render contact form if it is requested directly by Spammers

Despite the anti-spam honeypot, I keep getting spam emails bothering me to renew my domain name or buy their "contact us" form spam services.

Legitimate users would access my website first and then go to the **/contact** page to submit the form. How can I display an error page instead of the "contact form" for those spammy clients who are hitting my **/contact** page directly?

I do not want to insert any filtering rules on the frontend webserver, because referrer can be spoofed and Codered sends csrftoken cookie only for form submission. Some commercial proxy servers even remove referrer header in http request.

Is it possible to use a different honeypot field for each client? Such as, different radio and input fields?

Inizia tracciando la pagina /contact e i relativi punti di ingresso per la gestione di contact-form; l’issue non indica file sorgente né test. Determina se sono supportate le richieste dirette e i campi honeypot per client, quindi definisci e documenta il comportamento previsto prima dell’implementazione.

Scritto dal modello di indicizzazione a partire dal testo della issue.