Menu

#19 mailto: links

General
open
5
2013-02-04
2006-11-19
No

Line 647 in lang/eng.php reads:
$LANG['MESSAGE']['contact_admin'] = "Please contact the <a href=\"mailto:".$config['akkar_admin_email']."\">administrator</a>.";

This is not a very good way to do it, as the admin email address then can be harvested by spammers, since this string shows up in error messages from the public submission forms. Instead, the link should be hidden in a script:

$LANG['MESSAGE']['contact_admin'] = "Please contact the <a href=\"mailto.php?".strtr($config['akkar_admin_email'],'@','=')."\">administrator</a>.";

Discussion


Log in to post a comment.