Secret use on symfony2 parameters.ini

Question

I am currently working on a corporate project using Symfony2.

Our project has several different forms used to communicate with customers with its provider in different areas, and we need to protect them from spam.

I (we) heard that the secret alphanumeric code specified in the .ini parameters does the job (it looks like 7f820ab290c78aacb2... ), but we want to provide it, because we want to avoid using CAPTCHA codes and those stories that make some users go crazy with the characters they have to enter.

So the question is, does the SECRET code really protect the form from spammers?

If not, does anyone know about form protection without using visual inspection systems like Captcha?

Answer 1

This is for generating a csrf token . This does not really prevent spam, but makes it difficult for the bot to send forms automatically.