wp-includes/comment-template.php
Place somewhere sensible before the submit button!
root/wp-comments-post.php
at very top
if( !isset($_POST['honeypot'])) { die("No Direct Access"); } // Make sure the form has actually been submitted
$spam = $_POST['honeypot']; // This is our Honeypot field
if($spam) { // If the Honeypot field has been filled in
die("No spamming allowed ");
} else
