note 61899 deleted from function.mail by danbrown

From: Date: Sat, 25 Apr 2009 15:02:51 +0000
Subject: note 61899 deleted from function.mail by danbrown
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-153742@lists.php.net to get a copy of this message
Note Submitter: leonard_orb at future-data dot de ---- Warning: It should be stated clearly that "additional_headers" (the 4th parameter) will not only allow you to add customized mail headers. If there is an empty line in it the mail headers will be terminated and the mail body will start exactly at this point. mail ("foo@bar.example", "Test", "Hi dude", "Bcc: someone_else@bar.example\r\n\r\nBuy V1a*ra now\r\n"); will send a mail to <foo@bar.example> and <someone_else@bar.example> and advertise pills. It will give spammers the chance to abuse your webserver as a spam server if you e.g. happen not to check the values your form receives from the client and paste it directly into "additional_headers".

« previous php.notes (#153742) next »