Re: [Q] mail() & security
| From: | Richard Lynch | Date: | Wed, 06 Apr 2005 05:09:05 +0000 |
| Subject: | Re: [Q] mail() & security | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-212356@lists.php.net to get a copy of this message | ||
On Tue, April 5, 2005 9:22 pm, Eric Gorr said:
>> It's possible, though extremely unlikely, that somebody could construct
>> a
>> malicious email that passes through strip_tags and/or htmlentities and
>> still does something *bad* for your particular email application.
>
> Can you give an example?
No, I merely meant "theoretically possible" in the sense that of all the
possible combinations of characters in the universe, *one* of them could
do something nasty to your email client, even after strip_tags.
--
Like Music?
http://l-i-e.com/artists.htm