|
Answer» Using form mail on my site to try and cut down on spam, but still have issues with "spam harvesters" finding the recipient address in the code within the form itself.
Example:
If you view the source code on one of my form pages you will find:
[emailprotected]">
Does anyone know a way to hide this information so it will not be visible?
Thanks in advance!How are you processing the EMAIL? Are you using a mailto: link, or are you using a server-SIDE language, such as PHP? In the former case, >this page< can help you to obfuscate your email address. In the latter, well your email address just goes in the code and is never seen by the browser.Thanks, Rob...
I don't have any "mailto:" links on the site...removed them a long time ago.
I use a clone of Matt Wright's Form Mail...server side, however, the email address is visible if the source code for the form page is viewed. That's what I'm trying to obscure.I'd say protect it by HTACCESS... How? Make it so that all your forms mail links bring your users to a page that's like this:
"On the next screen, you will be asked to provide a username and password. Please provide the following information:
Username: form password: pass
This will allow you to use the sites Form Mail system and stop us from receiving SPAM"
You may WANT to change the information every few months in case someone programmes a bot that bypasses those accesses.
What about other issues? Most browsers are capable with this kind of access. HTACCESS is very secure since it runs on the server side (thanks Rob!) But the one problem is that once you log in, you don't really need to log in again until the session is cleared or the browser is closed. But this isn't too big of a worry on all sites, just ones that are in need of a backup. (Various ways of forcing logouts have been made, and are getting interesting) Anyways, for this quick spam stopper, you will not need a logout.
Instructions: I don't know anything about HTACCESS. But I know my server provides it! Read this then: http://www.bc.edu/offices/help/meta-elements/doc/articles/html/WEB-pwssecurefolder.shtml
I know a lot about HTACCESS, but I don't know the Unix encryption to build the passwords. No one is expected to. Use this tool to make the user:password lines for you: http://spectrum.troy.edu/password/
My server doesnt support HTACCESS! Then you will have to find other painful means. Like PHP protection. (I think Rob knows a lot about that)Sorry Saviour, FormMail is a Perl script which I have little experience of, preferring PHP. What you could do is remove the recipient address from your form and put it in the script instead. But the script is a little complicated, and I had difficulty trying to figure out exactly where to put the address.
To be HONEST, if you only want to accept email to one email address, this script is overkill. >Here's< a Perl script that would appear to fit your requirements more closely.
|