note 61304 deleted from ref.mail by didou
| From: | didou@php.net | Date: | Sun, 23 Apr 2006 22:36:16 +0000 |
| Subject: | note 61304 deleted from ref.mail by didou | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-109215@lists.php.net to get a copy of this message | ||
Note Submitter: Holger Meier
----
If you provide a contact form, don't give the user the possibility to write anything else than
his e-mail address directly into the additional header. In my opinion the best way to prevent those
hacks is to check the e-mail syntax and give the user a frontend wich doesn't allow to transfer
other code directly into the header.