note 56467 deleted from function.mail by danbrown
| From: | danbrown@php.net | Date: | Sat, 25 Apr 2009 15:03:50 +0000 |
| Subject: | note 56467 deleted from function.mail by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-153747@lists.php.net to get a copy of this message | ||
Note Submitter: Alan Hogan +PHP at pixels and pages ,com
----
Header injection is a very real, common threat in which an attacker uses your mail form to send mail
to whomever he chooses! I've been hit, myself, and on a website with relatively little
traffic! Read more about it here:
http://securephp.damonkohler.com/index.php/Email_Injection