Sr. Web Developer
mediabistro.com
US-NY-New York

Justtechjobs.com Post A Job | Post A Resume

Comments for: equazcion20070502

Message # 1510842:
Date: 12/02/08 10:50
By: Jason
Subject: Security

Doesn't think post a little security hole... assuming that the PHP script is entering information into the db, anyone could easily just go to

www.youraddress.com/somephpscript.php?receipt=1

to trigger the receipt code.. Maybe somesort of password variable should be passed back with the receipt unique to the particular email, i.e. sha1(date/time email was sent)

that way in your PHP code you could check that before you start entering information into the db.

Just a thought.

Previous Message | Next Message


Comments:
Very good script and ideasFranco02/04/09 12:55
Thank You So MuchZama12/29/08 12:44
SecurityJason12/02/08 10:50
Fix to multiple receiptsDave09/02/08 17:43
Thanksnima pedramasl05/10/08 06:27
RE: Multiple receiptsmike09/24/07 02:06
Doesn't work for Outlook / Outlook ExpressBrian Murphy06/17/07 05:50
Multiple receiptsJim Bob05/12/07 09:34
too lateStas Trefilov05/04/07 04:15
Getting receipts with your e-mail addressMike Borozdin05/04/07 02:47
"Some" mail clientsSteve05/04/07 00:47
Automatic Return ReceiptJeff Goolsby05/03/07 14:43
 

If you are looking for help, please post on the appropriate forum here. Your questions will be answered much more quickly.

Add A Comment:

Name:

Email:

Subject:

Message:

To reduce spam posts, messages are now manually approved

You are not [logged in]. That means your account will not get credit for this post.