and if he gets clever you can possibly use regular expressions as well, and if he gets more clever then at least people will need to go to great lengths to get the url he spams and if they go to so much trouble to be scammed then fuck em I guess lol.