Posted by Ben Bacarisse on 02/05/06 18:46

On Sun, 05 Feb 2006 07:12:47 -0800, abixalmon wrote:

> $headers = "From: email@sender.com\n"; $headers .= "Reply-To: $name
> <$email>\n\n"; mail("to_email","Subject",$message,$headers);

Eek! If I understand what you intend, this allows spammers to use address
injection to send mail from your server. Putting this online is very
risky.

All you need do to secure it (I think) is to remove anything "suspicious"
from the $email (the most suspicious being a newline!).

--
Ben.

[Back to original message]