Sr. Web Developer
mediabistro.com
US-NY-New York

Justtechjobs.com Post A Job | Post A Resume

Comments for: dan_ball20080118

Message # 1510443:
Date: 01/30/08 11:58
By: Colin McKinnon
Subject: Email Forms in PHP - read this first.

The code presented could easily be abused to send an email anywhere - by anybody.

The attack is described here:

http://www.securephpwiki.com/index.php/Email_Injection

But is easily prevented by eliminating newline chars (and CRs too to be paranoid) from the user submitted values.

Previous Message | Next Message


Comments:
Parse error with your scriptChris06/24/08 00:29
Emailing form not sendingLuAnne03/14/08 23:25
Email FormChris01/31/08 10:43
Email Forms in PHP - read this first.Colin McKinnon01/30/08 11:58
 

If you are looking for help, please post on the appropriate forum here. Your questions will be answered much more quickly.

Add A Comment:

Name:

Email:

Subject:

Message:

To reduce spam posts, messages are now manually approved

You are not [logged in]. That means your account will not get credit for this post.