Re: Newbie Form Question
| From: | David Dorward | Date: | Mon, 07 Aug 2006 07:37:36 +0000 |
| Subject: | Re: Newbie Form Question | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-240208@lists.php.net to get a copy of this message | ||
Richard Lynch wrote:
> <?php
> if (isset($_REQUEST['email'])){
> $success = mail($_REQUEST['action'], 'un/subscribe',
> 'un/subscribe', "From: $_REQUEST[email]\r\nReply-to:
> $_REQUEST[email]");
> if ($success) echo "Status Change Sent";
> else echo "Unable to send Status Change";
> }
> ?>
What if someone submitted:
action = poor_spam_victim@example.com
email = you@example.org\r\n\r\nA long winded evil spam message here
?
--
David Dorward <http://blog.dorward.me.uk/>
<http://dorward.me.uk/>
Home is where the ~/.bashrc is