Sec Bug->Bug #78911 [Opn]: Please do not show e-mails from bug reporters in plain text in this site!
| From: | stas@php.net | Date: | Thu, 05 Dec 2019 08:30:25 +0000 |
| Subject: | Sec Bug->Bug #78911 [Opn]: Please do not show e-mails from bug reporters in plain text in this site! | ||
| References: | 1 | Groups: | php.webmaster |
| Request: | Send a blank email to php-webmaster+get-28442@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=78911&edit=1
ID: 78911
Updated by: stas@php.net
Reported by: oma2000 at hotmail dot com
Summary: Please do not show e-mails from bug reporters in
plain text in this site!
Status: Open
-Type: Security
+Type: Bug
Package: Website problem
Operating System: N/A
PHP Version: Irrelevant
Block user comment: N
Private report: Y
Previous Comments:
------------------------------------------------------------------------
[2019-12-04 12:27:31] oma2000 at hotmail dot com
Also, if I try to change my mail to prevent it from being on a public website, this e-mail is still
being shown in the "History" section of the bug report, so I really can't remove it!
Please, do not show e-mail addresses in the "History" section.
------------------------------------------------------------------------
[2019-12-04 12:25:30] oma2000 at hotmail dot com
Description:
------------
I just filed a bug and I just noticed my e-mail is publicly shown in plain text, just replacing
"." with "dot" and "@" with "at".
Do you really think such a crude way of "obfuscating" an e-mail address is going to stop
spammer bots from harvesting it?
The e-mail should not be visible at all to begin with!
But if you absolutely need to display the e-mail address, please use a more advanced way of mail
address obfuscation.
Expected result:
----------------
E-mails should never be shown in a public website directly reachable from search engines.
Actual result:
--------------
Do not show e-mails in a public website.
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=78911&edit=1