Posted by Fran�ois on 02/06/06 18:40

"Good Man" <heyho@letsgo.com> wrote in message
news:Xns97627100E7446sonicyouth@216.196.97.131...
> "Fran�ois" <franc@nowhereinparticulare.whatever> wrote in
news:ds7pbg$eu7$1
> @news.tiscali.fr:
>
> > Hi there,
> >
> > if (ereg(":", $Name)) || (ereg(":", $From))
> >
> > If I validate my mail() headers thus, will this stop spammers
being
> > able to abuse my mail form? If there is somebody who has a colon
in
> > their name or email address, I have yet to meet them.
> >
> > Many thanks in advance
> >
> > Franc
>
> there are several things you need to do
>
> 1) hard-code the recipient - do not allow them to send mail where
they wish
>
> 2) put a session-cookie on the mail compose screen, and check for
that
> session on the mail-send script - not there? no mail gets sent

I already have those two in place, but hardcoding the recipient is NO
guarantee that some spam punk cannot inject their own headers into my
form fields. I was just wondering if my regular expression would
accomplish this.

Thanks for the input.

[Back to original message]