|
|
Posted by Gordon Burditt on 12/09/06 00:41
>I've got this form mail program that is called as an action from an HTML
>form. It runs with no errors, but the email is never sent - at least,
>it's never received. Here's the code:
You are permitting someone (spammers) to mail to anyone they want
(thousands of recipients) by injecting headers by putting newlines
in $_REQUEST['email']. Within about 5 minutes of putting that form
up, most ISPs will block mail from the server you have it on. Within
an hour, you probably will have blocked it also.
Navigation:
[Reply to this message]
|