I suspect that the spammers just extract whatever follows the keyword mailto: and use that as the email address. If it works for you it will work for them. You need stronger protection than that. That is why javascript obsuration works, because the string mailto: does not occur in the source of the page unless they use a javascript interpreter which I have never heard happening. 

On Thu, Dec 2, 2010 at 1:43 PM, LESLIE FRIESEN <FRIESEN.LESLIE@co.polk.or.us> wrote:
Ursula, thank you so much for your help. I did not insert those "amps"....either Drupal did or the browser did.  I just tried re-publishing the node, taking out the subject line, and trying all three different input filters. Each time, the "amp" got re-inserted.  Does anyone know why this is happening?
 
Leslie
 
P.S.  Carl, I do agree with you.  If I had my way, we'd be using invisimail.
 


>>> On 12/2/2010 at 10:28 AM, in message <AANLkTimtqVbXXiOz1k9ZywJyNqZOMa6-kJeCPf=qfqFf@mail.gmail.com>, Ursula Pieper <dramamezzo@gmail.com> wrote:
Leslie,

I agree with all that Carl said.

Just wanted to point you to the error in your html:
If you remove the "amp;" parts of your script, and also remove the
last part (?subject=ascii), it works.

Ursula


On Thu, Dec 2, 2010 at 10:09 AM, Carl Wiedemann
<carl.wiedemann@gmail.com> wrote:
> Consider http://drupal.org/project/invisimail or others listed
> here http://drupal.org/project/modules?filters=tid:7266
> As much as your admin may cringe at using another Drupal module, do you
> anticipate the amount of time spent in-house developing and maintaining a
> custom solution will be less than upgrading a widely-used module from time
> to time? (If you aren't already, consider using Drush to speed-up your
> codebase update workflow http://drupal.org/project/drush)
>
> On Thu, Dec 2, 2010 at 10:53 AM, LESLIE FRIESEN
> <FRIESEN.LESLIE@co.polk.or.us> wrote:
>>
>> Good morning,
>>
>> We've been receiving an increased amount of Spam recently. One of our
>> network admins is asking me to try ASCII-encoding the email addresses that
>> display on the website.  I ran a test email address (my own) through an
>> online tool that converts it to ascii, and came up with this:
>>
>>
>> &#102;&#114;&#105;&#101;&#115;&#101;&#110;&#046;&#108;&#101;&#115;&#108;&#105;&#101;&#064;&#099;&#111;&#046;&#112;&#111;&#108;&#107;&#046;&#111;&#114;&#046;&#117;&#115;
>>
>> I then inserted that ascii string into the create link tool in the
>> FCKEditor, attaching it to some text.  I've tried input filters of full
>> unfiltered html, filtered html and anonymous.
>>
>> No luck.  If I mouseover on the link, it looks right in the status bar
>> below, but if I actually click to send an email, it only displays the "&" in
>> the "To" field, and not the rest of the ascii. This throws an error in my
>> email client (Groupwise).
>>
>> You can see the test page at https://www.co.polk.or.us/ascii
>>
>> Does anyone have any ideas on how to implement this?  Is the email client
>> the problem?  My admin would prefer that I find a way to do it with ascii
>> encoding rather than downloading and installing yet another module to keep
>> up to date, if at all possible.
>>
>> Thanks in advance,
>>
>> Leslie
>> --
>> [ Drupal support list | http://lists.drupal.org/ ]
>
>
> --
> [ Drupal support list | http://lists.drupal.org/ ]
>
--
[ Drupal support list | http://lists.drupal.org/ ]

--
[ Drupal support list | http://lists.drupal.org/ ]