Textpattern CMS

#1 2012-10-22 21:05:50

Destry

Member

From: Haut-Rhin

Registered: 2004-08-04

Posts: 4,912

Website

[wiki] [docs] txp:email

Can someone comment on the security of using this tag, either here or in the associated email tag page? For example, is there some scrambling going on somewhere, or this really just a raw mailto: link being inserted?

I think a word or two on the security aspect of the tag is needed in the tag page, because I just went there looking for that info (I need to know) and didn’t see it.

#2 2012-10-22 21:40:16

CeBe

Plugin Author

From: Caen - Fr

Registered: 2010-06-25

Posts: 345

Website

Re: [wiki] [docs] txp:email

From function email() in taghandlers.php : in the HTML source code, the word “mailto” and any email address are converted into unicode entities.

ex:

mailto:mon@dresse.mail

becomes (tricky: without whitespaces between & and #)

& #109;& #97;& #105;& #108;& #116;& #111;& #58;& #109;& #111;& #110;& #64;& #100;& #114;& #101;& #115;& #115;& #101;& #46;& #109;& #97;& #105;& #108;

#3 2012-10-22 22:15:21

Destry

Member

From: Haut-Rhin

Registered: 2004-08-04

Posts: 4,912

Website

Re: [wiki] [docs] txp:email

Okay, I see. So it’s not a random scrambling like Enkoder would do, but it still makes it harder for a bot to automatically scrape.