[RESOLVED] Send email using address in result set

[webguy262]

I have a page that searches a database for members.

I want to allow users to email a member found in the search, but without divulging the members email address.

I was thinking I would include a "Contact" link in each row and program the link to open a new winsow with the mail form. I assume I need to pass the email address from the search results to the mail form, probably with a hidden field. But how do I get the right value in the hidden field based upon which link I click?

And is there a better/easier way to do what I want? One perhaps that will eliminate having the email address visible in the source code?

Thanks in advance!

[zabmilenko]

Yes! Just pass a user id of the person to contact through the form. Then, do a database lookup for the email address after the fact.

However, some kind of outgoing mail queue should be implemented. You don't want your users to be able to force an email to be sent each time they click a form button. A malicious user could submit hundreds of emails at a time to random user ids.