Re: Mail-format...
| From: | Gustav Wiberg | Date: | Mon, 19 Sep 2005 06:26:07 +0000 |
| Subject: | Re: Mail-format... | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-222630@lists.php.net to get a copy of this message | ||
----- Original Message ----- From: "David Tulloh" <david.tulloh@anu.edu.au>
To: "Gustav Wiberg" <gustav@varupiraten.se>
Cc: "PHP General" <php-general@lists.php.net>
Sent: Monday, September 19, 2005 8:19 AM
Subject: Re: [PHP] Mail-format...
It looks like somebody is trying to launch an e-mail injection attack. Looking at your code, I don't think you are vulnerable. You can read more about e-mail injection at http://securephp.damonkohler.com/index.php/Email_Injection You could also send nasty e-mails to PeiCanteenMc@aol.com, telling them to stop trying to hack your website. David Gustav Wiberg wrote:/G http://www.varupiraten.se/Hi there! I wonder why I get get these kind of mails (look down below in this mail) I recieve them sometimes... ...I have a code like this... $name = $_POST["frmNamn"]; $email = $_POST["frmEpost"]; //Send mail that there is a new member // mail("info@stammis.com","Ny medlem - Stammis Internet","Namn: $name, Epost:$email"); /G http://www.varupiraten.se/ Namn: wftmbsbwas@stammis.com Content-Type: multipart/mixed; boundary=\"===============0158601545==\" MIME-Version: 1.0 Subject: c1805938 To: wftmbsbwas@stammis.com bcc: PeiCanteenMc@aol.com From: wftmbsbwas@stammis.com This is a multi-part message in MIME format. --===============0158601545== Content-Type: text/plain; charset=\"us-ascii\" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit aienglpcm --===============0158601545==-- , Epost:wftmbsbwas@stammis.com-- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.11.1/104 - Release Date: 2005-09-16 Ok, thanx!