Form Security

Date: 01/15/09 (PHP Community) Keywords: php, security, web

Anyone have any advice for form security? I've been trying to use the advice from this page, but it doesn't seem to be working... Specifically, what happens is I get the error page and then the email shows up anyways...

if (ereg( "[\r\n\\r\\n]", $lastname ) ||

ereg( "[\r\n\\r\\n]", $email ) ||

ereg( "[\r\n\\r\\n]", $firstname )||

empty($email) || empty($firstname) ||

empty($lastname) || empty($zipcode) ) {

header( "Location: error.php" );

}

else {

mail( "blah@blah.com", "Website Form Request",

$message, "From: $email" );

header( "Location: thankyou.php" );

}

Source: http://community.livejournal.com/php/653858.html

« php driven image gallery -...

Working with multi arrays »