Posted by Toby Inkster on 11/14/05 22:24

Simon wrote:

> the message is created using the info given by the user. _but I don't check
> that data_.
> What could they inject into the message that would cause mail(...) to be
> unsafe?

$_POST['message'] = "BCC: me@example.com\r\n\r\nlalala";

--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~ http://tobyinkster.co.uk/contact

• Next in forum: multiple stacks, multiple versions bother anybody, or is it just me?
• Prev in forum: Re: nonstandard symbols: function to replace?
• Thread view: Re: mail() injection, am i safe?

[Reply to this message]