Support/Comments for Anti-Spam Email Plugin

That’s strange. I tried disabling that, and the plugin is still not working. I also tried disabling all plugins that activated on the WebpagePrerender event, and still no luck

Did you clear the cache after disabling the QuickEdit plugin?

Yeah, I forgot to mention that I also did that. I wonder what is wrong.

it didn’t work for me either, but if you look closely at the code you will find a small error:

$modx->documentOutput=preg_replace_callback("#<a[^>]*mailto:([^’\" ]*)[’\" ]>([^<]*)</a>#i", emailaddress, $modx->documentOutput);

should be:

$modx->documentOutput=preg_replace_callback("#<a[^>]*mailto:([^’\" ]*)[’\" ]>([^<]*)</a>#i", ’emailaddress’, $modx->documentOutput);
(quatations around emailaddress as you are calling a function)

found this error while reading the explanation of preg_replace_callback: http://be2.php.net/preg_replace_callback

hope this helps some of you.

i’ve done everithing suggested here... and no luck... it doesn’t work for me either... i have ModX 0.9.6

Even when it works, wouldn’t a spammer who clicked on the email link be able to harvest the address from the "TO" field of the email message? I wouldn’t think it would be that difficult to automate that harvesting.

Both SPForm and (I think) eForm hide the email address completely. It doesn’t appear on the page or in the source at all and is only used internally by the code that sends the message.

Bob

Quote from: BobRay at Dec 31, 2007, 02:09 PM

Even when it works, wouldn’t a spammer who clicked on the email link be able to harvest the address from the "TO" field of the email message? I wouldn’t think it would be that difficult to automate that harvesting.

Both SPForm and (I think) eForm hide the email address completely. It doesn’t appear on the page or in the source at all and is only used internally by the code that sends the message.

Bob

I’ve actually been surprised by how well JavaScript obfuscation still works. I usually write my own little scripts to do it, but I have used this plugin on some sites. I find it useful for social sites or other situations where email addresses might be added anywhere at any time, and sometimes I use a hybrid method where the site owner wants their email to be visible to humans but not spambots (a JavaScript-obfuscated email address that is a link to an eForm contact page).

Good point. I hadn’t thought of situations like comments or forum posts where users might be entering their own email addresses for public display.

Bob

Not to be rude, but I don’t understand what this plugin was meant to do.

The description says it convert emails to unicode.
Most websites are already send as unicode then they are transferred across the internet. UTF-8 is used everywhere and is a variable-length character encoding for Unicode.
So actually any email you write on a website, is already Unicode.
Using Unicode encoding does not "hide" it from anyone.

The example of the "encoded" email, well. that is not encoded to me.
As far as I can see all you do is escape all characters in the email.
A good bot will easily convert these escaped characters.

correct me if im wrong.

Like all spam-prevention measures, it’s not going to last. As fast as developers can think of a way to block them, spammers work out ways to get around the blocking attempts. They’re like roaches or fleas; no matter what you do to get rid of them it’s always temporary, they always come back eventually.

This variation http://modxcms.com/ObfuscateEmail-1379.html uses three different encoding methods applied randomly in the email address, so it makes it a bit more difficult for a bot to get anything out of it.