note 63643 added to function.header

dmitry dot polushkin at gmail dot com function is vulnerable to header injection in versions older that 4.4.2/5.1.2 If you want soemthing similar but working correctly an safe, use the redirect() method in class HTTP.php ( part of PEAR ). <?php require_once 'HTTP.php'; HTTP::redirect($url,true,true); ?> this ends the execution of the script(second param , no need for exit ), and sends a text response for system not supporting redirect (third parameter),also it will create an absolute URl, from a relative one,taking care of the details. ---- Server IP: 212.124.37.9 Probable Submitter: 200.7.26.92 ---- X-Spam-Status: No, hits=3.1 required=5.0 tests=DATE_MISSING,FROM_NO_LOWER autolearn=no version=2.64 ---- Manual Page -- http://www.php.net/manual/en/function.header.php Edit -- http://master.php.net/note/edit/63643 Del: integrated -- http://master.php.net/note/delete/63643/integrated Del: useless -- http://master.php.net/note/delete/63643/useless Del: bad code -- http://master.php.net/note/delete/63643/bad+code Del: spam -- http://master.php.net/note/delete/63643/spam Del: non-english -- http://master.php.net/note/delete/63643/non-english Del: in docs -- http://master.php.net/note/delete/63643/in+docs Del: other reasons-- http://master.php.net/note/delete/63643 Reject -- http://master.php.net/note/reject/63643 Search -- http://master.php.net/manage/user-notes.php