Posted by Good Man on 02/06/06 18:06

"Fran�ois" <franc@nowhereinparticulare.whatever> wrote in news:ds7pbg$eu7$1
@news.tiscali.fr:

> Hi there,
>
> if (ereg(":", $Name)) || (ereg(":", $From))
>
> If I validate my mail() headers thus, will this stop spammers being
> able to abuse my mail form? If there is somebody who has a colon in
> their name or email address, I have yet to meet them.
>
> Many thanks in advance
>
> Franc

there are several things you need to do

1) hard-code the recipient - do not allow them to send mail where they wish

2) put a session-cookie on the mail compose screen, and check for that
session on the mail-send script - not there? no mail gets sent


those usually help a bunch.

• Next in forum: Intersection of 2 times in php
• Prev in forum: Content-Encoding is not set in response when using zlib.output_compression
• Thread view: Re: Block email inject spammers

[Reply to this message]