Re: simple scrip to stop email injection

On Wed, 16 Aug 2006 10:53:30 +0100, Ross wrote: > > Been having loads of problems with this and have solved it using the > phpmailer. The only problem is I cannot get the class working on the remote > host I am working on. I am back to using mail() but need to drop in script > that checks my fields $fname, $sname, $email, $subject, $message. Couldn't you do a preg_match on \n, \r or \r\n for the $fname, $sname, $email and $subject? Checking $message would not be necessary, as it would probably contain linebreaks and it's not included in the message header anyway... HTH! Ivo