Tài liệu Linking to Online Resources

The user’s browser configuration controls how the browser handles an e-mail
link. Most browsers follow these two basic steps automatically:
1. Open a new message window in the default e-mail program.
2. Insert the address from the href attribute into the To field of the
message.
Unfortunately, Web page mailto: links are a prime source of e-mail
addresses for spammers. Creating a form to receive feedback is often a better
idea; better still, use JavaScript encryption on the e-mail address. (For more
info, see Steven Chapman’s great article, “Hiding Your Email Address,” at
http://javascript.about.com/library/blemail1.htm.) We generally
tend to provide our e-mail addresses in the form: jeff at conquest
media dot com, knowing that people are smart enough to substitute @ for
at and . for dot, but that address-harvesters usually aren’t that canny. If
you do elect to use a form instead, be aware that this too can present security
issues — always be sure to check your input, or take steps to avoid
so-called SQL injection attacks. For more info, see Colin Mackay’s article,
“SQL Injection Attacks and Some Tips on How to Prevent Them,” at www.
codeproject.com/KB/database/SQLInjectionAttacks.aspx