Hi,

I'm using a joomla cms to build a website, and have discovered that joomla uses a built-in plug-in called Email Cloacking which obfuscates email addresses prior to showing them on the webpage. They simply appear as "mailto" links which makes it harder for scrapers and bots to pick up.

However, I am developing a website that requires user-login access to pages where user's email addresses need to be shown (and edited) as plain text inside text boxes. I've had to disable this joomla plug-in so that email addresses do not contain the additional javascript and scrambled information for spam protection.

My question is, even though I've disabled an important spam protection function, I'm assuming it doesn't matter given that the email addresses will appear only in webpages requiring user-login access. Obviously, if the email addresses were published in public access pages, then yes... it's a risk, but surely scrapers and bots can't access pages protected behind user logins - as they would need to simulate a user login to access such information, right?