Posted by shimmyshack on 04/02/07 01:09

On 2 Apr, 01:07, "Arancaytar" <arancaytar.ilya...@gmail.com> wrote:
> Um, I think the answers here are all missing the point.
>
> The purpose of a contact form that sends emails with PHP is that _your
> email address is never shown to the user_. At all. The server takes
> the user's text, sends it to you, and tells the user the message was
> sent. Your address never even gets transmitted to the user's computer,
> whether in one piece or in a lot of really hard to read pieces.
>
> This makes all the talk of "obfuscating" an email address irrelevant.
> Unless the mailing script is made in a way that completely defeats its
> point - by including your address on the page - there is no email
> address to protect. The spammer can try to break into the server to
> see the script file with the address (really not worth it), or try to
> abuse the form by sending spam through it. But they can't lift your
> email address directly from it.

....actually the responses moved on from saying what you said - plus
adding a captcha, antispam on the client, and various other ways to
stop contact form spam - to how to protect email addresses if they /
were/ on the page, which is the only option for some....

[Back to original message]