does drupal prevent email harvesting?

webdev2 - May 6, 2009 - 19:44

I'm putting together a site where one of the specs was to prevent email harvesting. Does drupal do that auomatically, is there a module, or is it not possible?

Thanks.

=-=

VM - May 6, 2009 - 20:51

thanks. One thing I read on

webdev2 - May 6, 2009 - 20:56

thanks. One thing I read on the net about drupal was that, by default, raw email addresses were never on the web - they were always obfuscated in some way.

Is that true or do I need this module?

Thanks

Email obfuscation

matkeane - May 6, 2009 - 21:46

Hi,

I think, by default, Drupal hides user email addresses on profile pages, but email addresses in nodes are automatically converted to mailto links with the default input filter. So Drupal will attempt to protect the privacy of users, but assumes that a published email address is more useful as a link.

So, if you need to make email addresses on your site difficult to harvest, then you probably need a module. I thought I'd heard of some other modules but, if anybody is curious, the http://drupal.org/project/emailobfuscator module adds a new input filter which seems to work by replacing email addresses with text in name_at_domain_dot_tld format, and then wrapping it with javascript which writes the mailto link back into the page in character encoded form. I say 'seems to', as the only way to find out how it works is to download it and read the source code - maybe it obfuscates documentation and comments as well?! ;-)

OK, found some others. Not sure how they differ from eachother:
http://drupal.org/project/spamspan
http://drupal.org/project/Invisimail

spamspan

cwd - May 19, 2009 - 23:30

I read the spamspan page (http://drupal.org/project/spamspan) and it looks like it would do the same thing this module would do. however, i installed spamspan and i can't find any configuration options for it, and I can't figure out how to get it to work, either. any tips?

I guess I am looking for a module that I can install which will take content that already exists, and look for e-mail addresses in that content, and obscure them before serving the content up.

any tips?

Yes, by default drupal uses

Bobby1290 - May 6, 2009 - 21:46

Yes, by default drupal uses a contact form (enable and look at the one in your account profile).

You need this module only if you are posting emails in readable form on a drupal page.
but if you re going to post an email you can also post a link to the contact form.

If you need to show a list of emails-> obfuscator module.

prevent email harvesting?

mcfilms - May 7, 2009 - 02:50

I am not sure what the OP meant by "prevent email harvesting." If you mean prevent OTHERS from harvesting mail, then sure Drupal does that. But if you mean prevent the domain admin from email harvesting, that's a whole different problem. Normally a Drupal install needs an e-mail for a user to create an account. And these addresses are available to the people running the site. The best way to prevent "harvesting" would be not to collect them. But if you are allowing visitors to post comments -- hello spam.

Many thanks everyone!! I

webdev2 - May 7, 2009 - 13:18

Many thanks everyone!! I think I will use the obfuscator.

This is closed.

 
 

Drupal is a registered trademark of Dries Buytaert.