In your form declare a hidden type input and set it to 'strPassword'
<input type="hidden" name="OldCode" value="<cfoutput>#strPassword#</cfoutput>" />

and then change the comparison <cfif> to...

I have only had a few minutes to look at the code and the problem I see is that the value in your text field is being compared with the NEW spamcode; not the one that is generated for the page that...