I am finding that the native captcha plugin is ineffective at stopping comment spam, so I am going to try an image based one from http://www.securitystronghold.com/products/ironclad-captcha/.

The instructions tell you to put a bit of php code into the form that the commenter submits. Could anyone tell me which file I should insert it into?

Many thanks