Using an email obfuscator is better than nothing, but it isn't a sure thing. http://www.dynamicdrive.com/emailriddler/ http://www.dynamicdrive.com/dynamicindex9/emailscrambler.htm A formmailer script is your best hope for thwarting email harvesters provided the address is hidden inside the script - and not the html form. I use this one for (PHP): http://www.dbmasters.net/index.php?id=4