TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

How to Hide your Email Address on Web Pages

28 点作者 Ashuu超过 11 年前

16 条评论

JohnTHaller超过 11 年前
I use my own function to character encode all the letters except the @ sign and split it into multiple writelns via JavaScript. It has a NOSCRIPT fallback as well (email AT address DOT com) which is also character encoded. The combination has worked well on client sites with clean email addresses. My own personal email address was in the clear for years and still is on other sites, so that one is a bit hopeless.<p>My Obfuscate Mailto function is available for direct use on my site as well as a PHP and ASP function for plugging in to other sites: <a href="http://johnhaller.com/useful-stuff/obfuscate-mailto" rel="nofollow">http:&#x2F;&#x2F;johnhaller.com&#x2F;useful-stuff&#x2F;obfuscate-mailto</a><p>You can view the result by plugging an email in to that form or by viewing the source on my contact page: <a href="http://johnhaller.com/contact" rel="nofollow">http:&#x2F;&#x2F;johnhaller.com&#x2F;contact</a>
jrockway超过 11 年前
Is spam from address-scraping bots still a problem? I get why people did it before there was spam filtering, but these days, who cares?
评论 #7012843 未加载
评论 #7012137 未加载
评论 #7012325 未加载
评论 #7012200 未加载
kilian超过 11 年前
The reality is, spambots will get through it eventually no matter what, and you will only end up increasingly inconveniencing your visitors. (How pissed would you be if you copied an email address somewhere and it appeared in reverse?) With email being what it is today, it&#x27;s up to the receiving end to have good anti-spam software running.
arkitaip超过 11 年前
Make sure to read &quot;Nine ways to obfuscate e-mail addresses compared&quot; as it tells which technique is most effective<p><a href="http://techblog.tilllate.com/2008/07/20/ten-methods-to-obfuscate-e-mail-addresses-compared/" rel="nofollow">http:&#x2F;&#x2F;techblog.tilllate.com&#x2F;2008&#x2F;07&#x2F;20&#x2F;ten-methods-to-obfus...</a><p>Ultimately, obfuscating your email address might be futile<p><a href="http://www.theguardian.com/technology/2010/dec/21/keeping-email-address-secret-spambots" rel="nofollow">http:&#x2F;&#x2F;www.theguardian.com&#x2F;technology&#x2F;2010&#x2F;dec&#x2F;21&#x2F;keeping-em...</a>
评论 #7012449 未加载
kylec超过 11 年前
To me, email address obfuscation seems like one of those things that everyone does because everyone else is doing it. However, I&#x27;ve had my email address public and unobfuscated for years and I get very minimal amounts of spam, largely thanks to Gmail&#x27;s wonderful spam filter.
评论 #7013640 未加载
sdfjkl超过 11 年前
Unicode may help a bit too: ﹫@ != @<p>The one that spammers haven&#x27;t figured out yet is: &quot;My name is Bob and you can email me at this domain.&quot; (anywhere in a page under bob.com).
评论 #7012771 未加载
评论 #7012430 未加载
neilk超过 11 年前
I have had my email address available on a web page, with only minor obfuscation (escaping characters, sometimes in different encoding schemes) for over a decade. I don&#x27;t get a lot of spam on that address.<p>I doubt there&#x27;s any economic incentive for an email-harvester to solve the problem of even trivial obfuscation. These days you can buy tens of thousands of email addresses for a small amount of money. These are harvested from e-commerce and social media, and are much more likely to be real and current, and the targets more unsophisticated about clicking on ads.<p>EDIT: Actually there is an incentive; when the algorithm is applied on behalf of many naive users. So maybe the built-in algorithm in WordPress is actually more targetable than something you make up yourself. This isn&#x27;t crypto; it&#x27;s just obfuscation, so being original may help.
krapp超过 11 年前
I typically have a form on the site do the emailing directly. Here is a plugin I wrote for Wordpress to do this, which is basically just a mailer with a CSRF token: <a href="http://wordpress.org/plugins/plainmail/" rel="nofollow">http:&#x2F;&#x2F;wordpress.org&#x2F;plugins&#x2F;plainmail&#x2F;</a><p>The best solution to me is to simply never have an email address visible on your site anywhere.<p>... and yes, before someone points it out, having a <i>form</i> on your site is just as much of an issue potentially.
评论 #7013131 未加载
al2o3cr超过 11 年前
All of these are interesting, but ultimately fall down on the same point: spam &quot;bots&quot; harvesting emails aren&#x27;t always programs anymore. One could write a pretty straightforward program that grabs all the bits of webpages that look email-like (techniques like these would make them EASIER to ID) and then gets them read by people with a Mechanical Turk-style process.
__david__超过 11 年前
My technique was to use a &quot;+spam&quot; suffix on my email user with the idea that when the spambots got it, I&#x27;d just ban that address and change the web site to use &quot;+spam1&quot;. That was over 10 years ago and I&#x27;ve never once gotten spam to that address. Turns out spambots aren&#x27;t a problem any more after all.
elliottlan超过 11 年前
I&#x27;ve always been a fan of codeigniter&#x27;s &#x27;safe_mailto&#x27; function.<p>See here: <a href="https://github.com/EllisLab/CodeIgniter/blob/develop/system/helpers/url_helper.php#L260" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;EllisLab&#x2F;CodeIgniter&#x2F;blob&#x2F;develop&#x2F;system&#x2F;...</a>
sogen超过 11 年前
I remember reading an article that tried several methods on publicly email addresses and tallied how each one got spam. Turns out ROT13 was the best. I use this tool: <a href="http://rot13.florianbersier.com/" rel="nofollow">http:&#x2F;&#x2F;rot13.florianbersier.com&#x2F;</a> So far so great.
vezzy-fnord超过 11 年前
You can also simply display the address as an image. I don&#x27;t know how many spambots actively crawl and apply OCR to general images, rather than just specifically programmed CAPTCHA procedures.
评论 #7013143 未加载
yogo超过 11 年前
Clever trick. However, the bots will eventually catch on.
bound008超过 11 年前
You can also use <a href="http://boun.cr" rel="nofollow">http:&#x2F;&#x2F;boun.cr</a> it&#x27;s like bit.ly for email addresses.
foolproof超过 11 年前
or just use scr.im [¹], originally developed by Ozh [²].<p>[1] <a href="http://scr.im" rel="nofollow">http:&#x2F;&#x2F;scr.im</a><p>[2] <a href="http://ozh.org" rel="nofollow">http:&#x2F;&#x2F;ozh.org</a>