note 61899 deleted from function.mail by danbrown
| From: | danbrown@php.net | Date: | Sat, 25 Apr 2009 15:02:51 +0000 |
| Subject: | note 61899 deleted from function.mail by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-153742@lists.php.net to get a copy of this message | ||
Note Submitter: leonard_orb at future-data dot de
----
Warning: It should be stated clearly that "additional_headers" (the 4th parameter)
will not only allow you to add customized mail headers.
If there is an empty line in it the mail headers will be terminated and
the mail body will start exactly at this point.
mail ("foo@bar.example", "Test", "Hi dude",
"Bcc: someone_else@bar.example\r\n\r\nBuy V1a*ra now\r\n");
will send a mail to <foo@bar.example> and <someone_else@bar.example>
and advertise pills.
It will give spammers the chance to abuse your webserver as a spam server if you e.g.
happen not to check the values your form receives from the client and paste it
directly into "additional_headers".