safe_mailto() with <noscript> fallback

[eluser]mddd[/eluser]
The simple fact is: if it is visible to a browser that doesn't use javascript, it is also visible to a bot.
Encoding it in html entities doesn't do anything really. It takes one simple 'convert entities to characters' and everything is in plain sight.
Use it if it makes you feel better. But I don't believe it will do anything to protect you from spam.