I've got a whole load of EE sites under my belt and generally don't have much of a problem with spam. However, one site that I look after is getting bombarded by registration spam lately. It is an extremely low traffic site and was a bit neglected which meant it was running an old version of EE. I've now updated the site to the latest EE version and gone through double checking that everything was locked down. I've even tried installing Low NoSpam but I'm still getting the attempted registrations. My initial thoughts were that there was some security hole in this old version of EE. But since I have now updated everything I'm not so sure. What is the best way to deal with this other than turning registrations off? 3 Answers It's ADA compliant, your visitors help translate books and its probably the most popular. Snaptcha would do the trick as well, but I personally think that if you need a captcha (which I hate :)) then go with RECAPTCHA :) I went with RECAPTCHA in the end. Very quick to install and replace the built in EE CAPTCHA images. So far I haven't had 1 single spam registration whereas recently I was getting 30-40 a day! -- foamcow yesterday