I suspect that the spammers just extract whatever follows the keyword mailto: and use that as the email address. If it works for you it will work for them. You need stronger protection than that. That is why javascript obsuration works, because the string mailto: does not occur in the source of the page unless they use a javascript interpreter which I have never heard happening. <br>
<br><div class="gmail_quote">On Thu, Dec 2, 2010 at 1:43 PM, LESLIE FRIESEN <span dir="ltr"><<a href="mailto:FRIESEN.LESLIE@co.polk.or.us">FRIESEN.LESLIE@co.polk.or.us</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div style="margin:4px 4px 1px;font:10pt Tahoma">
<div>Ursula, thank you so much for your help. I did not insert those "amps"....either Drupal did or the browser did. I just tried re-publishing the node, taking out the subject line, and trying all three different input filters. Each time, the "amp" got re-inserted. Does anyone know why this is happening?</div>
<div> </div><font color="#888888">
<div>Leslie</div>
</font><div> </div>
<div>P.S. Carl, I do agree with you. If I had my way, we'd be using invisimail.</div><div><div></div><div class="h5">
<div> </div>
<div><br><br>>>> On 12/2/2010 at 10:28 AM, in message <AANLkTimtqVbXXiOz1k9ZywJyNqZOMa6-kJeCPf=<a href="mailto:qfqFf@mail.gmail.com" target="_blank">qfqFf@mail.gmail.com</a>>, Ursula Pieper <<a href="mailto:dramamezzo@gmail.com" target="_blank">dramamezzo@gmail.com</a>> wrote:<br>
</div>
<table style="font-size:1em;margin:0px 0px 0px 15px" bgcolor="#f3f3f3" border="0">
<tbody>
<tr>
<td>
<div style="padding-left:7px;border-left:#050505 1px solid">Leslie,<br><br>I agree with all that Carl said.<br><br>Just wanted to point you to the error in your html:<br>If you remove the "amp;" parts of your script, and also remove the<br>
last part (?subject=ascii), it works.<br><br>Ursula<br><br><br>On Thu, Dec 2, 2010 at 10:09 AM, Carl Wiedemann<br><<a href="mailto:carl.wiedemann@gmail.com" target="_blank">carl.wiedemann@gmail.com</a>> wrote:<br>> Consider <a href="http://drupal.org/project/invisimail" target="_blank">http://drupal.org/project/invisimail</a> or others listed<br>
> here <a href="http://drupal.org/project/modules?filters=tid:7266" target="_blank">http://drupal.org/project/modules?filters=tid:7266</a><br>> As much as your admin may cringe at using another Drupal module, do you<br>
> anticipate the amount of time spent in-house developing and maintaining a<br>> custom solution will be less than upgrading a widely-used module from time<br>> to time? (If you aren't already, consider using Drush to speed-up your<br>
> codebase update workflow <a href="http://drupal.org/project/drush)" target="_blank">http://drupal.org/project/drush)</a><br>><br>> On Thu, Dec 2, 2010 at 10:53 AM, LESLIE FRIESEN<br>> <<a href="mailto:FRIESEN.LESLIE@co.polk.or.us" target="_blank">FRIESEN.LESLIE@co.polk.or.us</a>> wrote:<br>
>><br>>> Good morning,<br>>><br>>> We've been receiving an increased amount of Spam recently. One of our<br>>> network admins is asking me to try ASCII-encoding the email addresses that<br>
>> display on the website. I ran a test email address (my own) through an<br>>> online tool that converts it to ascii, and came up with this:<br>>><br>>><br>>> &#102;&#114;&#105;&#101;&#115;&#101;&#110;&#046;&#108;&#101;&#115;&#108;&#105;&#101;&#064;&#099;&#111;&#046;&#112;&#111;&#108;&#107;&#046;&#111;&#114;&#046;&#117;&#115;<br>
>><br>>> I then inserted that ascii string into the create link tool in the<br>>> FCKEditor, attaching it to some text. I've tried input filters of full<br>>> unfiltered html, filtered html and anonymous.<br>
>><br>>> No luck. If I mouseover on the link, it looks right in the status bar<br>>> below, but if I actually click to send an email, it only displays the "&" in<br>>> the "To" field, and not the rest of the ascii. This throws an error in my<br>
>> email client (Groupwise).<br>>><br>>> You can see the test page at <a href="https://www.co.polk.or.us/ascii" target="_blank">https://www.co.polk.or.us/ascii</a><br>>><br>>> Does anyone have any ideas on how to implement this? Is the email client<br>
>> the problem? My admin would prefer that I find a way to do it with ascii<br>>> encoding rather than downloading and installing yet another module to keep<br>>> up to date, if at all possible.<br>>><br>
>> Thanks in advance,<br>>><br>>> Leslie<br>>> --<br>>> [ Drupal support list | <a href="http://lists.drupal.org/" target="_blank">http://lists.drupal.org/</a> ]<br>><br>><br>> --<br>
> [ Drupal support list | <a href="http://lists.drupal.org/" target="_blank">http://lists.drupal.org/</a> ]<br>><br>-- <br>[ Drupal support list | <a href="http://lists.drupal.org/" target="_blank">http://lists.drupal.org/</a> ]<br>
</div></td></tr></tbody></table></div></div></div>
<br>--<br>
[ Drupal support list | <a href="http://lists.drupal.org/" target="_blank">http://lists.drupal.org/</a> ]<br></blockquote></div><br>