Welcome to the E-Blah Community!
We would like to welcome you to our community and invite you to register an account or login.
Being a registered member is important, as it gives you several advantages over the normal Guest status. After registering you will be able to download files and images, post messages, and access member-only portions of the forum - just to name a few. Registration is quick and simple, and only takes about a minute of your time.

E-Blah Community    E-Blah Discussion    E-Blah Features  ›  mailto links and link colour / link color, css
Users Browsing Forum
Yahoo! Bot and 1 Guests

mailto links and link colour / link color, css  This thread currently has 1,108 views. Print
1 Pages 1 Recommend Thread
bengtang
July 14, 2007, 12:02pm Report to Moderator Report to Moderator

E-Blah Member
Posts: 18
Gender: Male
Posts Per Day: 0.04
Time Online: 4 hours 46 minutes
Location: uk
Age: 37
Mailto link and spam bots
I have noticed that the "email" buttons at the bottom of each message posted in E-Blah forums (like this one) use mailto: links. This puts users at extreme risk of having their emails harvested by spam bots. Such bots ignore robots.txt and the .htaccess methods of banning them are never 100% successful.

Rather than having a mailto link, i suggest that the email button should open up an email form, linked to a script to which is passed the email address of the forum member who clicked the "email" button (this is put in the email From: field), and the address of the recipient. Both addresses should not be displayed as text in the email form.

Auto censoring of email addresses in posts
It would also be good if there was a feature to automatically detect email addresses posted in messages by forum members, and replace the text with something else to prevent spam bots harvesting the emails. Say replace the @ character with a graphic or some other character, and make the address into a link to tell readers how to change it back to a working version. For example:
Code
<a href='javascript:alert("replace \"_at_\" with the at sign and \" with a dot.")' title='replace "_at_"  with the at sign and " with a dot.'>
username"_at_"yahoo"co"uk
</a>

Will display the address as username"_at_"yahoo"co"uk in the message text and when you mouseover it or click it, it will tell you how to change the address to make it workable. I used double quotes in this example to break up the email address because some spam bots are intelligent enough to read at and replace it with @, and some people may have the word at in their email address, but double quotes are never used within email addresses.

Also if users use the BB code [ mail ] it should not make a malto link but rather something like the above or open a javascript pop-up witn a graphic of the email address or a modified form like that above, which human readers can modify into a working email address.

Default template style for  links
I suggest that in future versions of E-Blah, the default style for links, especially those in message text, should be to underline them and make them a different colour so that readers can see that there is a link there that they can click on. It is not always obvious where the links are if they look the same as the rest of the text. For example if i say "this is an example of a forum mesage thread", it is not clear that the word "this" is a link to another message because it could be referring to this thread that i am typing and you are reading now.

Template Themes to inherit css from default theme
I recently updated from a previous version to E-Blah which had 3 themes, X, X_Blue and X_Red, to version 10.2.5. Whilst doing so, i noticed that X_Blue and X_Red did not reflect the changes made to X in the update. I uess it might help if the template.css files in those versions had
@import url(../X/template.css);
added to the top of them so that they rerad in the stylesheet for X and then modify it with their own colour styles. The admintemplate.css files already have a similar thing but it was not in the Template.css files for X_Blue and X_Red.

Revision History (6 edits; 3 reasons shown)
bengtang  -  July 14, 2007, 12:49pm
bengtang  -  July 14, 2007, 12:45pm
bengtang  -  July 14, 2007, 12:43pm
Logged Offline
Private Message Private message
bengtang
July 14, 2007, 5:41pm Report to Moderator Report to Moderator

E-Blah Member
Posts: 18
Gender: Male
Posts Per Day: 0.04
Time Online: 4 hours 46 minutes
Location: uk
Age: 37
More on the email form instead of mailto link idea:
There is a widely used free perl script by Matt Wright called FormMail which could be modified to work with E-Blah. The riginal has several security vulnerabilities, some of which are addressed in a "fixed" version my nms which you can find here, offered as a "compat" or "modules" package:
http://nms-cgi.sourceforge.net/scripts.shtml

For advisory on security risks of formmail, see:
http://www.monkeys.com/anti-spam/formmail-advisory.pdf
Logged Offline
Private Message Private message Reply: 1 - 1
1 Pages 1 Recommend Thread
Print

E-Blah Community    E-Blah Discussion    E-Blah Features  ›  mailto links and link colour / link color, css