Comments on: e-mail display https://habitablezone.com/2011/11/12/e-mail-display/ Mon, 06 Apr 2026 12:03:37 -0700 hourly 1 http://wordpress.org/?v=3.3.1 By: TB https://habitablezone.com/2011/11/12/e-mail-display/#comment-8408 TB Sun, 13 Nov 2011 23:38:58 +0000 http://habitablezone.com/?p=5226#comment-8408 Seems to be working. Now all that's left is our ISPs, but I don't think spammers typically mine sites for those. Seems to be working. Now all that’s left is our ISPs, but I don’t think spammers typically mine sites for those.

]]> By: Robert https://habitablezone.com/2011/11/12/e-mail-display/#comment-8399 Robert Sun, 13 Nov 2011 20:25:22 +0000 http://habitablezone.com/?p=5226#comment-8399 Are email addresses visible in public? Shouldn't be. But there is a serious flaw in WordPress's design that it displays the email address of people commenting on posts to the post's author. That's foolish, and I assume it's another consequence of WP's basic design as a one-person blog--the blog author is also its system administrator. Just now I commented-out a half-dozen places in the software where it displays the email address of a comment author. It wasn't until the sixth that the lights went out on email addresses on the comment list in the Dashboard, so it's possible that I extinguished email addresses a couple of places I shouldn't have. And that I missed a place or two that I should have suppressed. I'd appreciate it if you'd let me know if you spot email addresses exposed elsewhere. This kind of ad-hoc hack has a way of vanishing during a software upgrade, because the changes are outside my formal development process. In plain English, don't be suprised if email addresses reappear after an upgrade. Squawk, cite this incident, and I'll fix it again rapidamente. Are email addresses visible in public? Shouldn’t be. But there is a serious flaw in WordPress’s design that it displays the email address of people commenting on posts to the post’s author. That’s foolish, and I assume it’s another consequence of WP’s basic design as a one-person blog–the blog author is also its system administrator.

Just now I commented-out a half-dozen places in the software where it displays the email address of a comment author. It wasn’t until the sixth that the lights went out on email addresses on the comment list in the Dashboard, so it’s possible that I extinguished email addresses a couple of places I shouldn’t have. And that I missed a place or two that I should have suppressed. I’d appreciate it if you’d let me know if you spot email addresses exposed elsewhere.

This kind of ad-hoc hack has a way of vanishing during a software upgrade, because the changes are outside my formal development process. In plain English, don’t be suprised if email addresses reappear after an upgrade. Squawk, cite this incident, and I’ll fix it again rapidamente.

]]>