Posted by Matt on 09/27/60 11:34
I have a have a webform on a website that has a a php script that contains
the following code that is used for submitting data by email. Problem is
spammers are using it to relay spam. I altered it to not use the from
address but the website user does not like that since they cannot simply hit
reply to the email it generates.
Can someone tell me how to alter this code to keep spammers from altering or
adding headers? I imagaine something as simple as making sure $name is not
over so long would almost do. Or making sure it does not contain any CR or
LF's.
Matt
$headers = "MIME-Version: 1.0\r\n";
$headers .= "Content-type: text/html; charset=iso-8859-1\r\n";
/* additional headers */
$headers .= "From: $name<$email>\r\n";
mail( me@mydomain.com, "Mail from mydoamin.com", $data, $headers);
header ("Location: http://thankyou.html");
?>
Navigation:
[Reply to this message]
|