RE: [PHP] [Q] mail() & security
| From: | Chris W. Parker | Date: | Mon, 04 Apr 2005 23:16:36 +0000 |
| Subject: | RE: [PHP] [Q] mail() & security | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-212221@lists.php.net to get a copy of this message | ||
Eric Gorr <mailto:mailist@ericgorr.net>
on Monday, April 04, 2005 3:48 PM said:
> htmlentities would potentially make the body text messier then seems
> necessary.
Then just use strip_tags() and be done with it.
It's not like nuclear missiles are going to be launched via your email
form if you use the wrong function. Or in a less extreme case, your
computer get hijacked and used to send spam because you used
htmlentities() instead of strip_tags().