php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #49540 Automatic posts from PHP WIKI on news.php.net show unfiltered email addresses
Submitted: 2009-09-13 04:58 UTC Modified: 2009-09-18 13:29 UTC
From: president at basnetworks dot net Assigned: lsmith (profile)
Status: Wont fix Package: Website problem
PHP Version: Irrelevant OS:
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: president at basnetworks dot net
New email:
PHP Version: OS:

 

 [2009-09-13 04:58 UTC] president at basnetworks dot net
Description:
------------
I am not sure if this is the correct place to post this, but I will give it a shot.

The automatic posts from PHP WIKI (wiki.php.net) that get posted to http://news.php.net/php.webmaster show unfiltered email addresses ("someone@somewhere.net" instead of "someone at somewhere dot net").  The unfiltered emails are shown in the posts, as shown below:

---------------------------------------------

A new user has registered. Here are the details:

User name   : xxx
Full name   : xxx xxx
E-mail      : someone@somewhere.net < PROBLEM!

Date        : 2009/09/13 04:41
Browser     : Mozilla/5.0 ...
IP-Address  : xx.xx.xx.xx
Hostname    : xxx

---------------------------------------------

This information can be picked up very easily by spam bots, and this single point of weakness makes filtering the addresses everywhere else all for nothing.  I would appreciate if it was fixed, and the existing posts are rectified in some way, as my email address is posted unfiltered in one such message.

Thanks


Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2009-09-14 10:15 UTC] bjori@php.net
To be honest, I don't have a problem with the addresses to be shown.

Lukas: Could you look into it though?

 [2009-09-14 21:23 UTC] lsmith@php.net
Not sure if we should bother:
1) we need the email to be transparent in order to contact people
2) i am sure every harvester in the world can deal with most of the semi 
sane "email obscuring syntaxes"
 [2009-09-18 13:29 UTC] lsmith@php.net
Like I said, I see where you are coming from, but there is no way to 
keep your email address secret when working in OSS. A bit of obfuscation 
doesnt stop a spammer and too much simply makes you unreachable.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Mon Dec 09 21:01:27 2024 UTC