So where I work, I kind of manage parts of a drupal install (ver 5.3) and while I'm not well versed with it at all, I wouldn't count myself in the group who can't tell a search engine from a browser.
We're recently opened up commenting on our articles, which includes answering a captcha question similar to:
what's the second word in the phrase 'huge buildings balls cricket'.
This has been in place for the past month or so, and we still receive a load of 'buy viagra/cialis' comments. I'm fairly sure these are bots, but I can't seem to figure how they're getting around the captcha?
Should I be installing other captcha modules like re-Captcha? any other advice about this would be really appreciated!
Sometimes spambots aren't
Sometimes spambots aren't completely automated but seem to have someone driving them in which case they can often get round this sort of question. Or else the bot is programmed to recognise and answer certain types of question.
Which modules are you currently using to generate your CAPTCHA? Mollom would probably solve your problem.
CAPTCHA
Try this one..
Confident Technologies has created a unique Image-based Authentication and Verification solutions that can be imbedded within WCM's. As an example their Images-based Captcha solution offers pure ease of use and more security from BOTS and SPAM when websites have web pages where users can comment, register or blog. Because they are inherently easier the end user has a higher quality experience resulting in less abandons and more loyalty. They also offer Image-based password and authentication solutions that are easier and more secure. http://confidenttechnologies.com/products/
The CAPTCHA products are available for PHP, ASP.NET, Python, Wordpress, Drupal and Joomla; it is FREE and as easy to implement as recaptcha.
http://demo.confidenttechnologies.com/