| | |
Security issues around publishing email addresses on webpages
Please support our HTML and CSS advertiser: PostgreSQL or MySQL? Compare and contrast the two most popular open source databases
Thread Solved
![]() |
•
•
Join Date: Jun 2009
Posts: 37
Reputation:
Solved Threads: 0
Hi,
I'm using a joomla cms to build a website, and have discovered that joomla uses a built-in plug-in called Email Cloacking which obfuscates email addresses prior to showing them on the webpage. They simply appear as "mailto" links which makes it harder for scrapers and bots to pick up.
However, I am developing a website that requires user-login access to pages where user's email addresses need to be shown (and edited) as plain text inside text boxes. I've had to disable this joomla plug-in so that email addresses do not contain the additional javascript and scrambled information for spam protection.
My question is, even though I've disabled an important spam protection function, I'm assuming it doesn't matter given that the email addresses will appear only in webpages requiring user-login access. Obviously, if the email addresses were published in public access pages, then yes... it's a risk, but surely scrapers and bots can't access pages protected behind user logins - as they would need to simulate a user login to access such information, right?
I'm using a joomla cms to build a website, and have discovered that joomla uses a built-in plug-in called Email Cloacking which obfuscates email addresses prior to showing them on the webpage. They simply appear as "mailto" links which makes it harder for scrapers and bots to pick up.
However, I am developing a website that requires user-login access to pages where user's email addresses need to be shown (and edited) as plain text inside text boxes. I've had to disable this joomla plug-in so that email addresses do not contain the additional javascript and scrambled information for spam protection.
My question is, even though I've disabled an important spam protection function, I'm assuming it doesn't matter given that the email addresses will appear only in webpages requiring user-login access. Obviously, if the email addresses were published in public access pages, then yes... it's a risk, but surely scrapers and bots can't access pages protected behind user logins - as they would need to simulate a user login to access such information, right?
Correct, unless these bots can register on your sites and access the page with your email. You can always protect your email simply by making it an image and putting that image on your page instead of using a plugin like this.
•
•
Join Date: Jun 2009
Posts: 37
Reputation:
Solved Threads: 0
That's true, good idea. I might pursue this option and see if it works well. Thanks for your response.
![]() |
Similar Threads
- need help how to add multiple email addresses on a radio button (ASP)
- a way to include multiple email addresses as text in asp (ASP)
- deleteing email addresses (Windows Software)
- Problem with spam and spoofed email addresses (Networking Hardware Configuration)
- Microsoft,What did you say about Security Issues? (Viruses, Spyware and other Nasties)
- Security Issues (*nix Software)
Other Threads in the HTML and CSS Forum
- Previous Thread: how to receive data from html form...?
- Next Thread: 10 rare HTML Tag
| Thread Tools | Search this Thread |
appointments asp background backgroundcolor beta browser bug calendar cart cgi code codeinjection corporateidentity css design development displayimageinsteadofflash dreamweaver emailmarketing epilepsy explorer firefox flash form google griefers hackers hitcounter hover html ie7 ie8 iframe image images internet internetexplorer intranet iphone javascript jpeg layout macbook maps marketshare microsoft mozilla multimedia navigationbars news offshoreoutsourcingcompany opacity opera optimization pnginie6 positioning problem scroll seo shopping swf swf. textcolor timecolor titletags url urlseparatedwords visualization web webdevelopment webform website windows7





