php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #49540 Automatic posts from PHP WIKI on news.php.net show unfiltered email addresses
Submitted: 2009-09-13 04:58 UTC Modified: 2009-09-18 13:29 UTC
From: president at basnetworks dot net Assigned: lsmith (profile)
Status: Wont fix Package: Website problem
PHP Version: Irrelevant OS:
Private report: No CVE-ID: None
View Developer Edit
Anyone can comment on a bug. Have a simpler test case? Does it work for you on a different platform? Let us know!
Just going to say 'Me too!'? Don't clutter the database with that please !
Your email address:
MUST BE VALID
Solve the problem:
47 + 6 = ?
Subscribe to this entry?

 
 [2009-09-13 04:58 UTC] president at basnetworks dot net 
Description:
------------
I am not sure if this is the correct place to post this, but I will give it a shot.

The automatic posts from PHP WIKI (wiki.php.net) that get posted to http://news.php.net/php.webmaster show unfiltered email addresses ("someone@somewhere.net" instead of "someone at somewhere dot net").  The unfiltered emails are shown in the posts, as shown below:

---------------------------------------------

A new user has registered. Here are the details:

User name   : xxx
Full name   : xxx xxx
E-mail      : someone@somewhere.net < PROBLEM!

Date        : 2009/09/13 04:41
Browser     : Mozilla/5.0 ...
IP-Address  : xx.xx.xx.xx
Hostname    : xxx

---------------------------------------------

This information can be picked up very easily by spam bots, and this single point of weakness makes filtering the addresses everywhere else all for nothing.  I would appreciate if it was fixed, and the existing posts are rectified in some way, as my email address is posted unfiltered in one such message.

Thanks

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2009-09-14 10:15 UTC] bjori@php.net 
To be honest, I don't have a problem with the addresses to be shown.

Lukas: Could you look into it though?
 [2009-09-14 21:23 UTC] lsmith@php.net 
Not sure if we should bother:
1) we need the email to be transparent in order to contact people
2) i am sure every harvester in the world can deal with most of the semi 
sane "email obscuring syntaxes"
 [2009-09-18 13:29 UTC] lsmith@php.net 
Like I said, I see where you are coming from, but there is no way to 
keep your email address secret when working in OSS. A bit of obfuscation 
doesnt stop a spammer and too much simply makes you unreachable.
 
PHP Copyright © 2001-2026 The PHP Group
All rights reserved. 		Last updated: Mon Jan 05 02:00:02 2026 UTC