The filter can be bypassed by just not including the honeypot field

[maesitos]

The honeypot fiel needs to be present in the POST request

To Reproduce
Steps to reproduce the behavior:

1. Submit the form without the honeypot field
2. You've dodged the spam filter

Expected behavior
If the field is not present, the filter should be triggered. I installed the gem honeypot-captcha but bots were still sending spam. Presumably they have the POST request stored somewhere prior to using the honeypot and are bypassing the filter without any effort.