php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #49540 Automatic posts from PHP WIKI on news.php.net show unfiltered email addresses
Submitted: 2009-09-13 04:58 UTC Modified: 2009-09-18 13:29 UTC
From: president at basnetworks dot net Assigned: lsmith (profile)
Status: Wont fix Package: Website problem
PHP Version: Irrelevant OS:
Private report: No CVE-ID: None
Have you experienced this issue?
Rate the importance of this bug to you:

 [2009-09-13 04:58 UTC] president at basnetworks dot net
Description:
------------
I am not sure if this is the correct place to post this, but I will give it a shot.

The automatic posts from PHP WIKI (wiki.php.net) that get posted to http://news.php.net/php.webmaster show unfiltered email addresses ("someone@somewhere.net" instead of "someone at somewhere dot net").  The unfiltered emails are shown in the posts, as shown below:

---------------------------------------------

A new user has registered. Here are the details:

User name   : xxx
Full name   : xxx xxx
E-mail      : someone@somewhere.net < PROBLEM!

Date        : 2009/09/13 04:41
Browser     : Mozilla/5.0 ...
IP-Address  : xx.xx.xx.xx
Hostname    : xxx

---------------------------------------------

This information can be picked up very easily by spam bots, and this single point of weakness makes filtering the addresses everywhere else all for nothing.  I would appreciate if it was fixed, and the existing posts are rectified in some way, as my email address is posted unfiltered in one such message.

Thanks


Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2009-09-14 10:15 UTC] bjori@php.net
To be honest, I don't have a problem with the addresses to be shown.

Lukas: Could you look into it though?

 [2009-09-14 21:23 UTC] lsmith@php.net
Not sure if we should bother:
1) we need the email to be transparent in order to contact people
2) i am sure every harvester in the world can deal with most of the semi 
sane "email obscuring syntaxes"
 [2009-09-18 13:29 UTC] lsmith@php.net
Like I said, I see where you are coming from, but there is no way to 
keep your email address secret when working in OSS. A bit of obfuscation 
doesnt stop a spammer and too much simply makes you unreachable.
 
PHP Copyright © 2001-2019 The PHP Group
All rights reserved.
Last updated: Thu Jun 27 06:01:31 2019 UTC