note 61304 added to ref.mail

If you provide a contact form, don't give the user the possibility to write anything else than his e-mail address directly into the additional header. In my opinion the best way to prevent those hacks is to check the e-mail syntax and give the user a frontend wich doesn't allow to transfer other code directly into the header. ---- Server IP: 64.71.164.2 Probable Submitter: 68.5.182.253 ---- Manual Page -- http://www.php.net/manual/en/ref.mail.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+61304 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+61304&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+61304&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+61304&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+61304&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+61304&report=yes&reason=non-english Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+61304&report=yes&reason=already+in+docs Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+61304&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+61304&report=yes Search -- http://master.php.net/manage/user-notes.php