I suspect that the spammers just extract whatever follows the keyword mailto: and use that as the email address. If it works for you it will work for them. You need stronger protection than that. That is why javascript obsuration works, because the string mailto: does not occur in the source of the page unless they use a javascript interpreter which I have never heard happening.
On Thu, Dec 2, 2010 at 1:43 PM, LESLIE FRIESEN <FRIESEN.LESLIE@co.polk.or.us
wrote:
Ursula, thank you so much for your help. I did not insert those "amps"....either Drupal did or the browser did. I just tried re-publishing the node, taking out the subject line, and trying all three different input filters. Each time, the "amp" got re-inserted. Does anyone know why this is happening?
Leslie
P.S. Carl, I do agree with you. If I had my way, we'd be using invisimail.
On 12/2/2010 at 10:28 AM, in message
AANLkTimtqVbXXiOz1k9ZywJyNqZOMa6-kJeCPf=qfqFf@mail.gmail.com, Ursula Pieper dramamezzo@gmail.com wrote: Leslie,
I agree with all that Carl said.
Just wanted to point you to the error in your html: If you remove the "amp;" parts of your script, and also remove the last part (?subject=ascii), it works.
Ursula
On Thu, Dec 2, 2010 at 10:09 AM, Carl Wiedemann carl.wiedemann@gmail.com wrote:
Consider http://drupal.org/project/invisimail or others listed here http://drupal.org/project/modules?filters=tid:7266 As much as your admin may cringe at using another Drupal module, do you anticipate the amount of time spent in-house developing and maintaining a custom solution will be less than upgrading a widely-used module from
time
to time? (If you aren't already, consider using Drush to speed-up your codebase update workflow http://drupal.org/project/drush)
On Thu, Dec 2, 2010 at 10:53 AM, LESLIE FRIESEN FRIESEN.LESLIE@co.polk.or.us wrote:
Good morning,
We've been receiving an increased amount of Spam recently. One of our network admins is asking me to try ASCII-encoding the email addresses
that
display on the website. I ran a test email address (my own) through an online tool that converts it to ascii, and came up with this:
friesen.leslie@co.polk.or.us
I then inserted that ascii string into the create link tool in the FCKEditor, attaching it to some text. I've tried input filters of full unfiltered html, filtered html and anonymous.
No luck. If I mouseover on the link, it looks right in the status bar below, but if I actually click to send an email, it only displays the
"&" in
the "To" field, and not the rest of the ascii. This throws an error in
my
email client (Groupwise).
You can see the test page at https://www.co.polk.or.us/ascii
Does anyone have any ideas on how to implement this? Is the email
client
the problem? My admin would prefer that I find a way to do it with
ascii
encoding rather than downloading and installing yet another module to
keep
up to date, if at all possible.
Thanks in advance,
Leslie
[ Drupal support list | http://lists.drupal.org/ ]
-- [ Drupal support list | http://lists.drupal.org/ ]
-- [ Drupal support list | http://lists.drupal.org/ ]
-- [ Drupal support list | http://lists.drupal.org/ ]