#Online email obfuscator rot13 how to

$charactersLength = strlen( $characters ) – 1 Get the number of characters dynamically. $characters = ‘123456789qwertzuiopasdfghjklyxcvbnmMNBVCXYLKJHGFDSAPOIUZTREWQ’ And please note that the string must have even number of characters for this to work. If you change this, make sure you change the characters string in JavaScript as well. Characters that are to be used when obfuscating email address. $emailLetters = array_reverse( $emailLetters ) $emailLetters = preg_split( ‘//u’, $email, null, 1 ) We will work with UTF8 characters, just to be safe that we won’t mess up any address. Function takes string as an argument and returns a string. E-mail deobfuscation (JavaScript & CSS)Ĭode is thoroughly commented, have a look if you’d like to know more.Therefore, as a last deobfuscation step, we’ll reverse the reversed address and remove added CSS rules as soon as the user hovers over the link. If user copies the address, or if he clicks it, he’ll get the reversed one. This will, of course, leave us with a usability problem. This way, users will see real address, but spam bots will still (even if they can parse JavaScript) see a reversed e-mail. When user opens the page we will detect which e-mail links have been obfuscated, apply reversed ROT13 algorithm on them and direction:rtl and unicode-bidi:override CSS rules. The function will reverse the address and obfuscate it using slightly modified ROT13 algorithm.ĭeobfuscation will be done with JavaScript. To handle this, we’ll create a PHP function that will take string (e-mail address) as an argument. Script should work on all desktop browsers (I’m talking IE6+here) and on mobile browsers as well (at least on the ones that support JavaScript).It should show obfuscated e-mail to bots, but real one to humans humans should not even notice that obfuscation (or deobfusaction) is taking place.User should work only with real e-mail script should obfuscate and deobfuscate it on the fly. It should function pretty much out of the box.

#Online email obfuscator rot13 how to

In this tutorial I’ll show you how to create a script that will do just that.īasic requirements for such script (at least from my point of view) are: One of the ways to keep it safe is to obfuscate it. To keep this insane amount of spam out of your inbox, you should keep your e-mail safe when you display it on web. That’s around 200 billion spam messages per day. Dsoares' implementation (opens in new tab) comes with a set of 'speaking' variables and provides lots of food for our obfuscator.According to Wikipedia, more than 97% of all e-mails sent over the net are unwanted. ROT13 is not difficult, but it can be programmed quite verbosely. var myString = 'Hello from Future plc'Īs this is not intended as an encryption 101, we should settle on a comparatively simple substitution cipher. Furthermore, encryption is performed using a set of variables with very 'speaking' names. They are a classic attack target – if a ROM is to be decoded, the assembler usually starts out by looking for tables containing string sequences. Worker.js starts out with a string variable. When it's loaded in a browser, click the button to show a textbox. It loads a JavaScript file called worker.js, declares a button and contains a small bit of inline scripting. So let us start out with a small HTML webpage. Testing obfuscation works best if we have some 'real' code.