Couple of good suggestions from JJ and Will... I will briefly make the note that the captcha produces a number of other potential issues related to say visually impaired users, which is why for example PayPal now has an audio captcha (or at least they used to), although I think you'd be hard pressed to find any existing art for audio-captcha that can be dropped into CF. Not having that has the *potential* to be a usability issue, and usaiblity issues have the *potential* to be legal liabilities (even for privately held companies). Though at least in the present tense you're not likely to get sued over that particular usability issue, and given that all it really does is send an email with a url that's already available to them, they have other alternatives, so it's probably not going to become a legal concern in the future. But these thoughts are really more on the subject of captcha in general ... Captcha is also a nasty case for "user experience" -- often considered to be a "necessary evil" but it's sort of the exact opposite of "pleasant" for the users (in spite of the fact that they put up with it). For that reason, and because captcha isn't as bullet-proof as most people think, my own first choice would be to let them use it only if they're logged in.
One other option, which may be no better than the captcha solution, but is at least different, so it's something to consider, is to let them use the form without being logged in and require an email confirmation before you send to their friend. So the user plugs in their message to the friend, hits send and gets their own email with a url with a random code that identifies their request to send to the friend and then it only sends the email to the friend if they hit the url in their email. Of course if they're logged in, you omit the confirmation email and just send it since you already know who they are, but this would be an alternative to captcha if your clients are really insisting that anonymous users have access to the friend form. hth, ike -- s. isaac dealey ^ new epoch isn't it time for a change? ph: 503.236.3691 http://onTap.riaforge.org/blog ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:297550 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4