YOUR PUBLIC BOOKING FORM IS A BOT MAGNET. HERE IS HOW TO SEAL IT

Summary from the TLDR Marketing newsletter

Public forms can attract spam bots as soon as a product launches, especially without login requirements. The author recommends a two-layer system. Use Cloudflare Turnstile on every public form and verify its token server-side before storing submissions. A database trigger adds another safeguard by rejecting invalid submissions that bypass the application. Turnstile is free for up to 1M monthly requests, making it a low-cost way to protect public forms from spam.