Drupal is a registered trademark of Dries Buytaert
Protected Pages 3.0.0 — Major update available for module protected_pages (3.0.0). Commerce Core 3.3.8 — Minor update available for module commerce (3.3.8). Search API HTML Element Filter 1.0.7 — Minor update available for module search_api_html_element_filter (1.0.7). Layout Builder Reorder 2.0.1 — Minor update available for module layout_builder_reorder (2.0.1). Ban 1.1.0 — Minor update available for module ban (1.1.0). Field Formatter Range 2.0.0 — Major update available for module field_formatter_range (2.0.0). Field Formatter Range 8.x-1.8 — Minor update available for module field_formatter_range (8.x-1.8). Varbase Media Header 9.2.1 — Minor update available for module varbase_media_header (9.2.1). Search API Solr 4.3.11 — Module search_api_solr updated after 14 months of inactivity (4.3.11). Content Translation Redirect — Module content_translation_redirect crossed 1,000 active installs.
← All modules

SpamSpan filter

13,515 sites Security covered
View on drupal.org

SpamSpan helps protect email addresses from being harvested by spambots. It displays email addresses as clickable links for users with JavaScript enabled, but shows them in a more readable format for those without JavaScript or with it disabled, making it accessible to all users.

The SpamSpan module obfuscates email addresses to help prevent spambots from
collecting them. It is based on the technique from
spamspan but has undergone major modifications, as
the original spamspan code hasn't been updated since 2007.

The problem with most email address obfuscations is, that they rely upon
JavaScript being enabled on the client side. This makes the technique
inaccessible to people with screen readers. SpamSpan however will produce
clickable links if JavaScript is enabled, and will show the email address as
example [at] example.com if the browser does not support
JavaScript or if JavaScript is disabled.

This technique is unlikely to be absolutely foolproof. It is possible in theory
for a determined spambot to harvest addresses from your site, no matter how you
disguise them. But research suggests that by far the great majority of spambots
do not bother to attempt to collect addresses which have been hidden using
JavaScript.

Requirements

This module requires no modules outside of Drupal core.

Installation

Install as you would normally install a contributed Drupal module. For further
information, see
Installing Drupal Modules.

Configuration

  1. Go to the Extend page (/admin/modules), and enable the
    spamspan module (under Input Filters)

  2. Go to the Text Formats and Editors page (/admin/config/content/formats)
    and configure the desired input formats to enable the filter.

  3. (optional) Set available options under "Filter Settings".

Versions

Drupal 10.
The 3.x version is compatible with Drupal 10. It requires the php-xml extension installed on your web server, since it makes use of DOM (sudo apt-get install php-xml, when using apt-get).

Drupal 9.
Both the 3.x and the 8.x-2.x versions are compatible with Drupal 9, we recommend using the 3.x Branch, as older branches are not properly maintained anymore

Drupal 7
The 7.x-1.x is Drupal 7 compatible. NOTE, that this version is not properly maintained anymore.

Alternative modules

Activity

Total releases
2
First release
Feb 2025
Latest release
11 months ago
Releases (12 mo)
1
Maintenance
Active

Releases

Version Type Release date
3.2.2 Stable Aug 4, 2025
3.2.1 Stable Feb 11, 2025