in reply to prevent pasting into a CGI textbox

Javascript can easily turned off, so this is the wrong way. Captchas are a way to ensure your forms aren't filled automatically. http://en.wikipedia.org/wiki/Captcha