RE: [PHP] Is my feedback form being successfully abused?
| From: | Chris W. Parker | Date: | Tue, 20 Sep 2005 17:47:28 +0000 |
| Subject: | RE: [PHP] Is my feedback form being successfully abused? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-222780@lists.php.net to get a copy of this message | ||
Jochem Maas <mailto:jochem@iamjochem.com>
on Tuesday, September 20, 2005 2:37 AM said:
> this 'fairly recent' class of attack is already quite well documented,
> google around for more info.
Actually I did do some googling on it before posting and was relatively
confident that the attempt to exploit the form wasn't actually
successful. I posted to the list to find out if indeed it was being
exploited despite the lack of evidence in the maillog.
> I don't if any mail classes out there deal with this issue for you,
> I wrote a simple function to attempt to check for 'problem' message
> bodies:
Thanks for the code. I'll try to get it implemented soon.
Chris.