[2] The user types in the string and presses Submit,
and it runs the CGI
...
Now the script generates a page with the real email address as a mailto
hyperlink. The user may bookmark this page if he/she wishes.
Why expose the address at all? How about you send the (plain text only)
note on to the addressee w/o disclosing the address. If the recipient
wants the sender to know their address, they'll respond to them.
The same script could be used if there are any pages on the classiccmp
web site where a user could/should have an opportunity to send mail,
e.g. to the site maintainer, members listed as contacts or resources
for system XYZ, etc.
Just a thought,
--Steve.