note 61899 added to function.mail

Warning: It should be stated clearly that "additional_headers" (the 4th parameter) will not only allow you to add customized mail headers. If there is an empty line in it the mail headers will be terminated and the mail body will start exactly at this point. mail ("foo@bar.example", "Test", "Hi dude", "Bcc: someone_else@bar.example\r\n\r\nBuy V1a*ra now\r\n"); will send a mail to <foo@bar.example> and <someone_else@bar.example> and advertise pills. It will give spammers the chance to abuse your webserver as a spam server if you e.g. happen not to check the values your form receives from the client and paste it directly into "additional_headers". ---- Server IP: 64.246.30.37 Probable Submitter: 217.173.141.57 ---- Manual Page -- http://www.php.net/manual/en/function.mail.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+61899 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+61899&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+61899&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+61899&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+61899&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+61899&report=yes&reason=non-english Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+61899&report=yes&reason=already+in+docs Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+61899&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+61899&report=yes Search -- http://master.php.net/manage/user-notes.php