you should use captcha to prevent bots from posting spams