So apparently spam bots are a thing that exist and aren't great. So we need a way to protect our forms from spam bots doing their thing.

A simple way to do this is to have a hidden form field that's hidden by CSS, spam bots can't tell if it's hidden or not, but for a human it should be and thus they won't fill it out. All that's left is to check that field got left empty in your recieving script and you should be good to go!

I'd highly recommend also leaving a note for those that have CSS turned off because they might want to fill your form out as well. I took this idea for spam prevention from here.