View Page Source shows my email!!!

[npsari]

I am using the below php email from:

I have the email field hidden...

 

while($row = mysql_fetch_array($result))
  {
echo "<form name=\"theform\" action=\"/email.php\" method=\"POST\">";
print "<INPUT TYPE=hidden NAME=\"email\" value=\"[email protected]\" SIZE=1><BR>");
print "Your email:";
print "<INPUT TYPE=TEXT NAME=\"sender\" value=\"\" SIZE=25><BR><BR>";
print "Message body:";
print "<TEXTAREA NAME=\"message2\" ROWS=7 COLS=35></TEXTAREA><BR><BR>";
echo("<input type=\"image\" name=\"SUBMIT\" src=\"/h-images/all/email.gif\">");
echo("</form>")
}

 

But when a user clicks on view PageSource

They can see my email

Is there anyway to hide it completely?

[trq]

Is there anyway to hide it completely?

 

No, not if you want it in the form.

 

Why do you need it in the form?

[TEENFRONT]

As thorpe said, why have it in the form?

 

You can set the email as a var on email.php like...

 

$email = "[email protected]";

 

instead of (im guessing this is what your doing) grabbing it from POST $email = $_POST['email'];

 

then do the mail(); dance.

[MadTechie]

can't you just pass the mailing info to a php page that uses mail!

 

(of course this will show up on the mail sent)

[npsari]

Well, the email actually changes

 

so, the field is like that...

 

 print "<INPUT TYPE=hidden NAME=\"email\" value=\"$row[Email]\" SIZE=1><BR><BR>\n";

 

As you can see, the email is derived from the mySQL databse

 

This form allows users to send an email to each other

But the reason of using the site for is to hide the email

 

And now, i realized that people can see it from Page Source

[MadTechie]

#1 send the user id and lookup (the email via the id) before sending the mail

#2 encrypt the email address and then decrypt it on the next page.

[TEENFRONT]

have email set as an ID then. so in the table where the users email is, im guessing your using an id like a primary key or whatever for each member? if so..

 

 

<INPUT TYPE=hidden NAME=\"email\" value=\"$row[iD]\" SIZE=1><BR><BR>\n";

 

then on the email.php before the mail(); grab the email row from the database where it matches ID

 

 

[npsari]

Good idea

 

Thats a great way around it

 

I will have to connect to mySQL in the mail submit form

 

Thanks for the info guys

 

Never thought of that