That is true for crawling bots which hit simple web forms. Also using some JavaScript kills most of them. Although such methods won't work with targeted bot attack.