[support] ASCII encoding email addresses

Larry Garfield larry at garfieldtech.com
Fri Dec 3 03:02:34 UTC 2010


Greetings from the invisimail maintainer. :-)

1) Email obfuscation is dirty business.  It's a hack, in all forms.

2) If spammers have already harvested your address from the web site, it's too 
late.  They share address banks with each other all the time, so once you're 
in the database you never get out.  Removing or obfuscating your address now 
will not get you very far.

That said...

3) Your admin is a goofball. :-)  Keeping a module up to date is, in most 
cases, not at all difficult nor is it dangerous unless you're living on the 
edge with no backups or staging environment.  (And then you have bigger 
problems than an out of date module.)  

If it helps to assuage his fears, I recently released invisimail 1.3 which I 
consider to be quite stable (thanks to some awesome work from random people in 
the issue queues).  I am not planning any further work on it for Drupal 6 
baring someone finding a security hole or a grossly huge bug.

I have a Drupal 7 version about 99% complete that is almost a complete rewrite 
(I didn't actually write the original module; I took it over a few years ago) 
to account for the changes in the filter API in Drupal 7.  It's now a modular, 
flexible, extensible framework for plugging in a variety of email obfuscators 
or encoders.  However, I will not be backporting that to Drupal 6 (it wouldn't 
really be possible) so you have no fear of the module changing drastically out 
from under you.

If, on the other hand, you're dealing with just a small number of fixed 
addresses you could try using invisimail to encode the address on a dummy 
install and then copying from that.  I don't know if that will work better, 
since it is, sadly, not uncommon for input filters to collide.

Actually, now that I think about it, it could be CKEditor that's adding extra 
& when saving, thinking that you want an actual & to show in the page.  That's 
something else to look at.

--Larry Garfield

On Thursday, December 02, 2010 12:43:31 pm LESLIE FRIESEN wrote:
> Ursula, thank you so much for your help. I did not insert those
> "amps"....either Drupal did or the browser did.  I just tried
> re-publishing the node, taking out the subject line, and trying all three
> different input filters. Each time, the "amp" got re-inserted.  Does
> anyone know why this is happening?
> 
> Leslie
> 
> P.S.  Carl, I do agree with you.  If I had my way, we'd be using
> invisimail.
> 
> >>> On 12/2/2010 at 10:28 AM, in message <AANLkTimtqVbXXiOz1k9ZywJyNqZOMa6-
kJeCPf=qfqFf at mail.gmail.com>, Ursula Pieper <dramamezzo at gmail.com> wrote:
> Leslie,
> 
> I agree with all that Carl said.
> 
> Just wanted to point you to the error in your html:
> If you remove the "amp;" parts of your script, and also remove the
> last part (?subject=ascii), it works.
> 
> Ursula
> 
> 
> On Thu, Dec 2, 2010 at 10:09 AM, Carl Wiedemann
> 
> <carl.wiedemann at gmail.com> wrote:
> > Consider http://drupal.org/project/invisimail or others listed
> > here http://drupal.org/project/modules?filters=tid:7266
> > As much as your admin may cringe at using another Drupal module, do you
> > anticipate the amount of time spent in-house developing and maintaining a
> > custom solution will be less than upgrading a widely-used module from
> > time to time? (If you aren't already, consider using Drush to speed-up
> > your codebase update workflow http://drupal.org/project/drush)
> > 
> > On Thu, Dec 2, 2010 at 10:53 AM, LESLIE FRIESEN
> > 
> > <FRIESEN.LESLIE at co.polk.or.us> wrote:
> >> Good morning,
> >> 
> >> We've been receiving an increased amount of Spam recently. One of our
> >> network admins is asking me to try ASCII-encoding the email addresses
> >> that display on the website.  I ran a test email address (my own)
> >> through an online tool that converts it to ascii, and came up with
> >> this:
> >> 
> >> 
> >> &#102;&#114;&#105;&#101;&#115;&#101;&#110;&#046;&#108;&#101;&#115;&#108;
> >> &#105;&#101;&#064;&#099;&#111;&#046;&#112;&#111;&#108;&#107;&#046;&#111;
> >> &#114;&#046;&#117;&#115;
> >> 
> >> I then inserted that ascii string into the create link tool in the
> >> FCKEditor, attaching it to some text.  I've tried input filters of full
> >> unfiltered html, filtered html and anonymous.
> >> 
> >> No luck.  If I mouseover on the link, it looks right in the status bar
> >> below, but if I actually click to send an email, it only displays the
> >> "&" in the "To" field, and not the rest of the ascii. This throws an
> >> error in my email client (Groupwise).
> >> 
> >> You can see the test page at https://www.co.polk.or.us/ascii
> >> 
> >> Does anyone have any ideas on how to implement this?  Is the email
> >> client the problem?  My admin would prefer that I find a way to do it
> >> with ascii encoding rather than downloading and installing yet another
> >> module to keep up to date, if at all possible.
> >> 
> >> Thanks in advance,
> >> 
> >> Leslie
> >> --
> >> [ Drupal support list | http://lists.drupal.org/ ]
> > 
> > --
> > [ Drupal support list | http://lists.drupal.org/ ]


More information about the support mailing list