Re: [Q] mail() & security

Eric Gorr wrote:

Any other suggestions?

Well see this example : function clean_body($body_text) { if(ini_get('magic_quotes_gpc')) $body_text = stripslashes($body_text); // If magic_quotes are on, strip the extra-added slashes return htmlentities($body_text); // Return the value } This is a good way to start, I think. Filtering the input first would be a nice idea too, especeally if there're more input fields ;-) -- Josip Dzolonga http://josip.dotgeek.org jdzolonga[at]gmail.com