Industry guru Dave Taylor offers free tech support on a wide variety of technical and business topics, including HTML, Apple iPhone, online advertising, Cascading Style Sheets, Web design, management, Unix, Linux, search engine optimization, online dating, Mac OS X, shell script programming and Microsoft Windows.

How can I hide an HTML form's email address?

I really enjoyed your article about the "mail to" problem many of us rely on for folks to contact us for one reason or another.

While I am just a geekette wanna-be, and am at best a stumbling dabbler in script and coding, I was wondering if you could share greater detail about how you scripted your contact form? When I took a look at the source code, not that I understand a lot of it, I was unable to determine how the message gets to where it needs to go without specifying the destination in the HTML?


Dave's Answer:

Think about it this way: when you go to a Web page with a form, you're viewing a bunch of HTML that's rendered a certain way and has a link to a program on the server that is supposed to receive the data from the user who has filled out the form. That's the "ACTION" attribute in the FORM tag.

With me so far?

That remote program is not another HTML form, but an actual script or program written in Perl, C, or some other language. Within that program, you can do anything you want as long as you also remember to output valid HTML, usually the 'thank you' page.

With an email form, the script receives the data and turns it into an email message that's then "injected" into the email system on the server.

The only question becomes: does the recipient's email address show up in the form data on the original HTML page, or can it be hidden in the CGI script itself so that that address is hidden from users? With most email scripts, you're expected to include your email address as a hidden input element, but if you have control of the CGI script itself, it's straightforward to have something like

    addr="my\@email.address";
(that's the Perl form, at least).

So if you can delve into the CGI script on the server, you can safely bury your email address on the server in a spot where no spammer can scrounge it for their own purposes. If you can't and you're stuck using an existing CGI script on the server, you might consider some of the workaround ideas discussed in the comments thread of avoiding mailto: links.

I hope this clarifies things!



Help others find this article at Del.icio.us, Digg, Netscape, Reddit, and Stumble Upon    

Subscribe!

Never miss another useful Q&A article again! Subscribe to AskDaveTaylor with Google Reader.

Comments

I just wanted to thank you for the intelligent tips!
Your site is a valuable resource.
Will do my best to "pay it forward".

: )

Thanx (again),

- Dan

Posted by: Dan Peavey at April 17, 2008 12:00 PM

I have something to say, now that you mention it, but ...
Starbucks coffee cup I do have a lot to say, and questions of my own for that matter, but first I'd like to say thank you for all your efforts on this Web site by buying you a cup of coffee!

I do have a comment, now that you mention it!











Remember personal info?


Please note that I will never send you any unsolicited email. Ever.

While I'm at it, please note that by submitting a question or comment you're agreeing to my terms of service, which are: you relinquish any subsequent rights of ownership to your material by submitting it on this site.








Ask Dave Taylor: The iPhone App: Advertisement



Follow me on Twitter @DaveTaylor

Search
Find just the answers you seek from among our 2300+ free tech support articles by using our Lijit search engine.


Help!





Subscribe to
Ask Dave Taylor!

Add to Google Reader
Add to My Yahoo!
Subscribe in NewsGator Online

RDF   XML

Free Updates!
Sign up and get free weekly updates and special offers on books, seminars, workshops and more.


Recent Entries
Book Links
© 2002 - 2010 by Dave Taylor. All Rights Reserved.

Note: This web site is for the purpose of disseminating information for educational purposes, free of charge, for the benefit of all visitors. We take great care to provide quality information. However, we do not guarantee, and accept no legal liability whatsoever arising from or connected to, the accuracy, reliability, currency or completeness of any material contained on this web site or on any linked site.

[whiteboard marker tray]
"Ask Dave Taylor®" is a registered trademark of Intuitive Systems, LLC.