if you allow them to post, they still can POST spam,

there is no way of stoping it.. Simple as really.