added CAPTCHA with server side verification to form, and a variable 'flag' limit plus report counts to the DB, and a warning to users visiting a flagged link