Are the spam all from the same IP? could you perhaps make it check how many times someone has posted within the last 5 minutes, and if it is above a certain amount, force them to type in some captcha code thing? Or answer some random question about construct2 (something that can be learnt in the manual or whatever).