RE: Re: [OT] Kenneth's pet project!

["Ian Willoughby" <ian@xxxxxxx>]

Ere unfortunately there is plenty of code out there for running client
side JavaScript on the server so no matter how you changed it the bot
could still execute it and get the answer. A solution would be to not
include the email address on the page and provide a web form that sends
a mail to the person who wrote the review via there email address stored
in the backed database.

R's
Ian


-----Original Message-----
From: Paul [mailto:p-gale@xxxxxxx]
Sent: 19 June 2003 13:03
To: ukha_d@xxxxxxx
Subject: RE: [ukha_d] Re: [OT] Kenneth's pet project!

Is this reasonably common (i.e. do any other sites use it) - if so, then
surely the bot creators can easily add it?  How can I modify this script
so it's personal to my site and lessen the chance of a bot being
successful in the future?

Paul.



-----Original Message-----
From: garygfx [mailto:garygfx@xxxxxxx]
Sent: 19 June 2003 12:13
To: ukha_d@xxxxxxx
Subject: [ukha_d] Re: [OT] Kenneth's pet project!



--- In ukha_d@xxxxxxx, "Jon Payne" <jgpayne@b...> wrote:
> I'd certainly be interested in this - at the moment I put an image
of my
> email address on the website but something more user friendly would
be good.

Here's the code. It's pretty simple but fools the bots because it
would need to interprit javascript and also the javascript is only
called if it can recognise the onclick event which browsers can and
bots can't. (Unless someone has taken the trouble to write a
javascript interpriter which is highly unlikely (don't speak too
soon!))

<SCRIPT language="JavaScript">
<!--
function mailme(user,domain,suffix){
document.location="mailto:"+user+"@"+domain+"."+suffix;
}
//-->
</SCRIPT>

Pop the above somewhere inbetween the HEAD tags, ideally after the
closing TITLE tag. Then create a link to any email address in your
BODY using this HTML:

<A href="javascript:;"
onclick="javascript:mailme('fred','hotmail','com')">Click here
to
email Fred</A>

You can use the onclick event as many times as you like on the same
page so long as that javascript function is in place at the top.
Break the address down into 3 parts: name @ domain @ suffix. Another
example:

<A href="javascript:;"
onclick="javascript:mailme('peter.smith','fatlarrys','co.uk')">Peter
Smith</A>

I could make it really clever and actually encrypt the address as
well using, for example A=Z, B=Y, C=X, (or better) but I have no
evidence that anything more than the above javascript routine is
necessary to throw bots totally off the scent.

Gary.