Posted by Chuck Anderson on 01/12/07 15:56

Rik wrote:
> Chuck Anderson wrote:
>
>> If I enter "subject\r\n" in the text field and click "Send Mail" the
>> output is:
>>
>> subject = subject\\r\\n
>> subject_match = 0
>>
>> ..... I don't get it?! Shouldn't that be a match?
>>
>
> The string '\r\n' != "\r\n"....
>

Okay, ... ... but I don't follow you. How does that apply?

Isn't that how someone would inject extra headers - by entering
\r\nbcc:.... (for instance)?

How do I detect that?

--
*****************************
Chuck Anderson • Boulder, CO
http://www.CycleTourist.com
*****************************

• Next in forum: Error Messages
• Prev in forum: Re: Newbie: which IDE to use?
• Thread view: Re: preg_match to detect \r\n - doesn't work

[Reply to this message]