|
|
Posted by Good Man on 02/06/06 18:06
"Franηois" <franc@nowhereinparticulare.whatever> wrote in news:ds7pbg$eu7$1
@news.tiscali.fr:
> Hi there,
>
> if (ereg(":", $Name)) || (ereg(":", $From))
>
> If I validate my mail() headers thus, will this stop spammers being
> able to abuse my mail form? If there is somebody who has a colon in
> their name or email address, I have yet to meet them.
>
> Many thanks in advance
>
> Franc
there are several things you need to do
1) hard-code the recipient - do not allow them to send mail where they wish
2) put a session-cookie on the mail compose screen, and check for that
session on the mail-send script - not there? no mail gets sent
those usually help a bunch.
[Back to original message]
|