My site serves as a private information and messaging portal for a membership-based organization.  I've added an XML/XSL module that calls a backend script that pulls the membership data and presents a nice member directory, including email addresses.

One of my members is concerned about webbots, crawlers, spiders, etc that would be able to access the site and scrape off email addresses for spammers.  I told him I didn't think this would be possible since all unauthenticated users are automatically redireted to the login page.  But I'm assuming a webbot or spider would be constrained by the same login restrictions as a human at a browser.

I don't want to give him a false sense of security, especially since he's a Treasury agent with the Computer Crimes division of the IRS!  Can someone confirm for me that if a page is restricted to certain users in the portal, that an automated webbot, spider, crawler, screen scraper, etc would not be able to access the page and extract data from it.

Thanks!