[support] ASCII encoding email addresses

[Walt Daniels]

I suspect that the spammers just extract whatever follows the keyword
mailto: and use that as the email address. If it works for you it will work
for them. You need stronger protection than that. That is why javascript
obsuration works, because the string mailto: does not occur in the source of
the page unless they use a javascript interpreter which I have never heard
happening.

On Thu, Dec 2, 2010 at 1:43 PM, LESLIE FRIESEN <FRIESEN.LESLIE at co.polk.or.us
> wrote:

>  Ursula, thank you so much for your help. I did not insert those
> "amps"....either Drupal did or the browser did.  I just tried re-publishing
> the node, taking out the subject line, and trying all three different input
> filters. Each time, the "amp" got re-inserted.  Does anyone know why this is
> happening?
>
> Leslie
>
> P.S.  Carl, I do agree with you.  If I had my way, we'd be using
> invisimail.
>
>
>
> >>> On 12/2/2010 at 10:28 AM, in message
> <AANLkTimtqVbXXiOz1k9ZywJyNqZOMa6-kJeCPf=qfqFf at mail.gmail.com>, Ursula
> Pieper <dramamezzo at gmail.com> wrote:
>   Leslie,
>
> I agree with all that Carl said.
>
> Just wanted to point you to the error in your html:
> If you remove the "amp;" parts of your script, and also remove the
> last part (?subject=ascii), it works.
>
> Ursula
>
>
> On Thu, Dec 2, 2010 at 10:09 AM, Carl Wiedemann
> <carl.wiedemann at gmail.com> wrote:
> > Consider http://drupal.org/project/invisimail or others listed
> > here http://drupal.org/project/modules?filters=tid:7266
> > As much as your admin may cringe at using another Drupal module, do you
> > anticipate the amount of time spent in-house developing and maintaining a
> > custom solution will be less than upgrading a widely-used module from
> time
> > to time? (If you aren't already, consider using Drush to speed-up your
> > codebase update workflow http://drupal.org/project/drush)
> >
> > On Thu, Dec 2, 2010 at 10:53 AM, LESLIE FRIESEN
> > <FRIESEN.LESLIE at co.polk.or.us> wrote:
> >>
> >> Good morning,
> >>
> >> We've been receiving an increased amount of Spam recently. One of our
> >> network admins is asking me to try ASCII-encoding the email addresses
> that
> >> display on the website.  I ran a test email address (my own) through an
> >> online tool that converts it to ascii, and came up with this:
> >>
> >>
> >>
> &#102;&#114;&#105;&#101;&#115;&#101;&#110;&#046;&#108;&#101;&#115;&#108;&#105;&#101;&#064;&#099;&#111;&#046;&#112;&#111;&#108;&#107;&#046;&#111;&#114;&#046;&#117;&#115;
> >>
> >> I then inserted that ascii string into the create link tool in the
> >> FCKEditor, attaching it to some text.  I've tried input filters of full
> >> unfiltered html, filtered html and anonymous.
> >>
> >> No luck.  If I mouseover on the link, it looks right in the status bar
> >> below, but if I actually click to send an email, it only displays the
> "&" in
> >> the "To" field, and not the rest of the ascii. This throws an error in
> my
> >> email client (Groupwise).
> >>
> >> You can see the test page at https://www.co.polk.or.us/ascii
> >>
> >> Does anyone have any ideas on how to implement this?  Is the email
> client
> >> the problem?  My admin would prefer that I find a way to do it with
> ascii
> >> encoding rather than downloading and installing yet another module to
> keep
> >> up to date, if at all possible.
> >>
> >> Thanks in advance,
> >>
> >> Leslie
> >> --
> >> [ Drupal support list | http://lists.drupal.org/ ]
> >
> >
> > --
> > [ Drupal support list | http://lists.drupal.org/ ]
> >
> --
> [ Drupal support list | http://lists.drupal.org/ ]
>
> --
> [ Drupal support list | http://lists.drupal.org/ ]
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.drupal.org/pipermail/support/attachments/20101202/dd69f312/attachment-0001.html