Posted by Marcin Dobrucki on 03/14/06 10:49
Q wrote:
> Hi..
>
> This script has been abused to send to AOL. My question "How the ... did
> they do that???"
> $headers .= "From: \"".$_POST[name]."\" <".$_POST[email].">\n";
>
> mail('some@recipient.somewhere', "Website: ".$_POST[subject],
> nl2br($_POST[text]), $headers);
$_POST['email'] = 'foo@bar.com>\nBcc: <somewhere@over.the.rainbow';
or something similar.
Navigation:
[Reply to this message]
|