Looking for Python code to obsfucate mailto links on web site

A

Andrew McLean

I'm looking at putting some e-mail contact addresses on a web site, and
wanted to make it difficult for spammers to harvest them.

I found some Python code that I can call within my application.

http://www.zapyon.de/spam-me-not/

It works exactly as expected. However, I am concerned that the technique
used for obsfucating the e-mail address may be a bit weak.

Searching the web it looks like the best solution for me might be to
embed JavaScript in the web page that dynamically generates the e-mail
address in the browser client.

I've found on-line tools that will generate suitable JavaScript, but
need to automate the "encoding" process in Python.

Now I could write suitable code myself, but would be surprised if it
wasn't already available. Any pointers?

To head of a few comments I'm anticipating ;-)
- no I don't want to use a contact form
- accessibility is an issue, but I'm also including postal addresses and
phone numbers giving alternatives to e-mail. Also the main enquiry
address won't be obfuscated.
 
D

Dan Sommers

I'm looking at putting some e-mail contact addresses on a web site,
and wanted to make it difficult for spammers to harvest them.
Click to expand...

[ ... ]
Searching the web it looks like the best solution for me might be to
embed JavaScript in the web page that dynamically generates the e-mail
address in the browser client.
Click to expand...

[ ... ]
Now I could write suitable code myself, but would be surprised if it
wasn't already available. Any pointers?
Click to expand...

Pointers? What do you think this is, C? ;-) Try this:

def spam_averse_email_address( email_address, text ):
"""return HTML-embedded javascript to create a spam-averse mailto link"""

def char_codes( a_string ):
return ",".join(str(ord(a_char)) for a_char in a_string)

return """<script type="text/javascript">
<!--
document.write(
'<a href="mailto:'
+ String.fromCharCode(%s)
+ '">'
+ String.fromCharCode(%s)
+ '<\/A>');
// -->
</script>""" % (char_codes(email_address), char_codes(text))

The newlines within the triple quoted string are important; use that
function something like this:

print "<html>"
print "<head><title>Title</title></head>
print "<body>
print "<P>%s</P>" % spam_averse_email_address( '(e-mail address removed)',
'click here to email me' )
print "</body>"
print "</html>"

You mentioned accessibility; make sure that your HTML does something
sensible if the user's browser doesn't do javascript.

HTH,
Dan
 
J

James Stroud

Dan said:
I'm looking at putting some e-mail contact addresses on a web site,
and wanted to make it difficult for spammers to harvest them.
Click to expand...


[ ... ]

Searching the web it looks like the best solution for me might be to
embed JavaScript in the web page that dynamically generates the e-mail
address in the browser client.
Click to expand...


[ ... ]

Now I could write suitable code myself, but would be surprised if it
wasn't already available. Any pointers?
Click to expand...


Pointers? What do you think this is, C? ;-) Try this:

def spam_averse_email_address( email_address, text ):
"""return HTML-embedded javascript to create a spam-averse mailto link"""

def char_codes( a_string ):
return ",".join(str(ord(a_char)) for a_char in a_string)

return """<script type="text/javascript">
<!--
document.write(
'<a href="mailto:'
+ String.fromCharCode(%s)
+ '">'
+ String.fromCharCode(%s)
+ '<\/A>');
// -->
</script>""" % (char_codes(email_address), char_codes(text))

The newlines within the triple quoted string are important; use that
function something like this:

print "<html>"
print "<head><title>Title</title></head>
print "<body>
print "<P>%s</P>" % spam_averse_email_address( '(e-mail address removed)',
'click here to email me' )
print "</body>"
print "</html>"

You mentioned accessibility; make sure that your HTML does something
sensible if the user's browser doesn't do javascript.

HTH,
Dan
Click to expand...

Bruno Desthuilliers has a nice one-liner:

python -c "print '@'.join(['.'.join([w[::-1] for w in p.split('.')]) for
p in '(e-mail address removed)'.split('@')])"


I came up with this:

python <<EOF
print "".join([chr(ord(i)^ord(j)^64) for (i,j) in
zip('hpqudxu','BCEGKMQ')] +
list('ude.alcu.ibm@'[::-1]))
EOF

For mine, you you'll have to reverse the algorithm to generate the
"cipher text".

James

--
James Stroud
UCLA-DOE Institute for Genomics and Proteomics
Box 951570
Los Angeles, CA 90095

http://www.jamesstroud.com/
 
A

Andrew McLean

Dan said:
I'm looking at putting some e-mail contact addresses on a web site,
and wanted to make it difficult for spammers to harvest them.
Click to expand...

[ ... ]
Searching the web it looks like the best solution for me might be to
embed JavaScript in the web page that dynamically generates the e-mail
address in the browser client.
Click to expand...

[ ... ]
Now I could write suitable code myself, but would be surprised if it
wasn't already available. Any pointers?
Click to expand...

Pointers? What do you think this is, C? ;-) Try this:

def spam_averse_email_address( email_address, text ):
"""return HTML-embedded javascript to create a spam-averse mailto link"""

def char_codes( a_string ):
return ",".join(str(ord(a_char)) for a_char in a_string)

return """<script type="text/javascript">
<!--
document.write(
'<a href="mailto:'
+ String.fromCharCode(%s)
+ '">'
+ String.fromCharCode(%s)
+ '<\/A>');
// -->
</script>""" % (char_codes(email_address), char_codes(text))

The newlines within the triple quoted string are important; use that
function something like this:

print "<html>"
print "<head><title>Title</title></head>
print "<body>
print "<P>%s</P>" % spam_averse_email_address( '(e-mail address removed)',
'click here to email me' )
print "</body>"
print "</html>"

You mentioned accessibility; make sure that your HTML does something
sensible if the user's browser doesn't do javascript.

HTH,
Dan
Click to expand...

That's great. Just what I was looking for.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Python vs "Low Code" solutions for SaaS development 0
Bash scripts for web apps 1
Newbie: Looking for code review on my first Python project. 8
Python for Web Development Course 0
Moving to Python for web 9
Python-URL! - weekly Python news and links (Mar 31) 4
How can I upload a tar.bz2 file to OpenStack swift object storage container using the Python swift client? 1
Using a CMS for small site? 10

Members online

Total: 26 (members: 2, guests: 24)
Robots: 127

Forum statistics

Threads
473,780
Messages
2,569,608
Members
45,241
Latest member
Lisa1997

Latest Threads

Top