Re: [Q] mail() & security
| From: | Eric Gorr | Date: | Mon, 04 Apr 2005 22:12:42 +0000 |
| Subject: | Re: [Q] mail() & security | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-212213@lists.php.net to get a copy of this message | ||
Chris W. Parker wrote:
www.php.net/addslashesI am uncertain what dangerous/annoying things might happen if I did not call this function. Can you come up with any? Remember, the text being processed goes straight from $_POST[ 'body' ] through strip_tags (+ more?) into mail(). It would seem that addslashes would just make the body text look messy for no reason.
www.php.net/htmlentitiesIt seems as if strip_tags strip out everything that htmlentities would change and would therefore be unnecessary. -- == Eric Gorr =============================== http://www.ericgorr.net === "The more you study, the more you know. The more you know, the more you forget. The more you forget, the less you know. So, why study?" - ??? == Insults, like violence, are the last refuge of the incompetent... ===