note 55441 deleted from ref.mail by didou
| From: | didou@php.net | Date: | Sun, 23 Apr 2006 22:32:35 +0000 |
| Subject: | note 55441 deleted from ref.mail by didou | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-109204@lists.php.net to get a copy of this message | ||
Note Submitter: chris at free-source dot com
----
For those calling this "exploit" a bug in php, you are wrong. This is just like
SQL-injection, how if the mail() function supposed to knwo that you didn't want to send a
multipart message or that you didn't want to send a BCC? it can't. YOU MUST validate ALL
user input. To everything. Period.