Re: novice with hacked email form issue
| From: | Greg Schnippel | Date: | Tue, 21 Feb 2006 19:51:41 +0000 |
| Subject: | Re: novice with hacked email form issue | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-230828@lists.php.net to get a copy of this message | ||
On 2/21/06, cKc Consultants <ckccnslt@ckcconsultants.com> wrote:
> An email form that uses a simple server side php code to send the variable
> values managed to send:
<snip>
Try looking for articles on 'email injection'. This is a really good
place to start for a description of the security risk and ways to
patch your code:
http://securephp.damonkohler.com/index.php/Email_Injection
You should also check recent archives on this list, there have been
several threads on this topic that may be of use.
- schnippy