just to expand on the above:
(most – although not necessarily all admittedly) spambots do not do javascript.
Therefore, as they will not be able to put anything into the cart, the/your orderpage will not have any input fields to enter any information (email etc) into, nor will there actually be a button to submit any info or indeed register any account.