|
Posted by Markus G. Klφtzer on 11/20/57 11:26
"Neil McDermott" <neil.mcdermott@easiserv.com> wrote:
> $email=$_POST['email'];
> $query=$_POST['query'];
> $to="enquiries@mysite.co.uk";
> $from="$email";
there is the problem ....
$from="website@mysite.co.uk";
then the $email should be somewhere in the body of the message.
If you want to be able to respond automatically to any enquiries
(ie click on reply) you might want to fill the reply-to[1] header with
their email address .... AFTER checking that it is only a single line
and not a header-inject with bcc
hth
mgk
FuΓnoten/Footnotes:
===================
[1] the difference between the from and reply-to header is that some MTA
will block an invalid From, something that invariable happens if
people type in email addresses (somebody@freeserve.ocm)
--
Experience is the hardest kind of teacher.
It gives you the test first,
and the lesson afterward.
Navigation:
[Reply to this message]
|