Re: Newbie Form Question
| From: | Richard Lynch | Date: | Mon, 07 Aug 2006 20:58:01 +0000 |
| Subject: | Re: Newbie Form Question | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-240282@lists.php.net to get a copy of this message | ||
On Mon, August 7, 2006 2:37 am, David Dorward wrote:
> Richard Lynch wrote:
>
>> <?php
switch($_REQUEST['email']){
case 'subscribe@lists.php.net':
case 'unsubscribe@lists.php.net':
//Do nothing.
break;
default:
die("Hack attempt.");
break;
}
>> if (isset($_REQUEST['email'])){
>> $success = mail($_REQUEST['action'], 'un/subscribe',
>> 'un/subscribe', "From: $_REQUEST[email]\r\nReply-to:
>> $_REQUEST[email]");
>> if ($success) echo "Status Change Sent";
>> else echo "Unable to send Status Change";
>> }
>> ?>
>
> What if someone submitted:
>
> action = poor_spam_victim@example.com
>
> email = you@example.org\r\n\r\nA long winded evil spam message here
>
> ?
--
Like Music?
http://l-i-e.com/artists.htm