|
|
Posted by feed_sheep on 11/02/05 17:31
>> $email=$_POST['email'];
> ...
>> if(mail($to,"E-mail from MySite",$message,"From:$email\n")){
>
> Take it down, it is being abused - or is about to be abused - by
> spammers.
>
> The last argument to mail() is a list of extra headers and because of
> the way your script is structured a custom form or script can submit
> extra Bcc: email addresses tagged on to the 'email' form field.
>
Can you expand on how this works and how to prevent spammers from using
this? I'm not sure I understand. Thanks!
David
Navigation:
[Reply to this message]
|