How do you stop the SPAM ?

[Vinyl Signs]

Hi - I'm hoping someone has a few ideas on how to stop an email address in the store being picked up by the "Spammers" ?
I have started to receive a few spam emails using the email address I have used on an "about us" page - but I am guessing that any addresses (in the correct format) - anywhere in the store - could be "harvested" ?
Is there any way that all email addresses throughout the store can be "protected" in any way ? (obfuscation ?)

[Stuff4Toys]

The "Contact Us" form page does not give out any eMail address info. You can set up several contacts for the drop down in the admin~configuration~eMail options

This way you are not as likely to accumulate the spam. Until the bot's learn how to access your contact us form. We have a hand coded e-Comm site with a contact form that gets 15 to 20 spam bot hits a day.

I am working on getting it converted to Zen-Cart now.
JOhn ><>

[Website Rob]

The problem could have a few sources.

- is the same address used on a Web page (ZenCart page or not) anywhere else on your site
- does your Control Panel allow you to accept eMail only at addresses you setup
(cPanel for example, is a Control Panel that provides that feature)
- use ASCII code instead of HTML
(i.e. replace address @ domain.com -with- address & #00064; domain.com
note: the forum makes me put a space between & # but you should not)

Replacing the '@' sign with ASCII code allows Browser to still see & use an eMail address properly but prevents the majority of Spam bots from seeing / grabbing it.

You can pickup a handy ASCII Chart for free, along with some other Charts that are handy.

[Vinyl Signs]

The "Contact Us" form page does not give out any eMail address info. You can set up several contacts for the drop down in the admin~configuration~eMail options

Just so I understand...
What you are saying is that none of the email addresses setup to work on the contact us page is able to be "harvested" ? - not sure I understand that - is the admin side of the cart effectively "hidden" ?
Does that also apply with all of the email addreses in the admin~configuration~eMail options ? - because there are a LOT on that page

The problem could have a few sources.
- is the same address used on a Web page (ZenCart page or not) anywhere else on your site

Yes - I made the mistake of putting a genuine email address on an about us page (EZPage) - now modified as in you suggestion below...

- does your Control Panel allow you to accept eMail only at addresses you setup
(cPanel for example, is a Control Panel that provides that feature)

Yes - I have CPanel - but have not fully got to grips with the email setup - It's quite a subject to get your head round (for me it is anyway !)

- use ASCII code instead of HTML
(i.e. replace address @ domain.com -with- address & #00064; domain.com
note: the forum makes me put a space between & # but you should not)

Now that is something I had not thought about -

Replacing the '@' sign with ASCII code allows Browser to still see & use an eMail address properly but prevents the majority of Spam bots from seeing / grabbing it.

Are there any problems with doing this ? - as I can still plainly see the email address on the page ? - even though the code is different - but then I haven't a clue how the (people ?) who do this email harvesting do their thing....
It would help to know which parts of the cart are vulnerable to email harvesters - so you know where and where not to have an email address ?

You can pickup a handy ASCII Chart for free, along with some other Charts that are handy.

Thank You
Is anyone else having much of a problem with spam ?

[Website Rob]

What you are saying is that none of the email addresses setup to work on the contact us page is able to be "harvested" ? - not sure I understand that - is the admin side of the cart effectively "hidden" ?

As to the Contact Form used within ZenCart, it is like most forms designed to prevent eMail Harvesting. The actual eMail address is not used nor shown anywhere on the Web page nor in the coding. The actual eMail address is within a script that is not publicly available. What sometimes confuses people is the information at the top of the Contact page.

Home :: Contact Us
Name
Address
etc.

If one chooses to show an eMail address then that address will be Harvested -- it is a publicly available Web page.

Do not include an eMail address when setting up the following:
Admin > Configuration > My Store > Store Address and Phone

Does that also apply with all of the email addreses in the admin~configuration~eMail options ? - because there are a LOT on that page

To my knowledge and I could be wrong, the addresses shown there are not displayed on any Web page - by default.

This though, can be confusing / misleading and could be better worded;
Email Address (Displayed to Contact you)


In general, if an eMail address has already been Harvested then it is already on many Spam lists. The only way to effectively stop Spam being sent to that address is to no longer use it. I realize that can be a major inconvenience to some but it is the only way. Otherwise, one will forever receive Spam at that address and other Spam methods will have to be used.