note 72988 deleted from ref.mail by googleguy
| From: | googleguy@php.net | Date: | Tue, 22 Oct 2013 15:00:17 +0000 |
| Subject: | note 72988 deleted from ref.mail by googleguy | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-197293@lists.php.net to get a copy of this message | ||
Note Submitter: jo at camindo de
----
If you have programmed headers do not adopt post-values unfiltered!!
Often used in scripts, and often abused by spam mailings:
<?php
$headers = "From: {$email}";
?>
If somebody posts email="me@example.com
Bcc:someone1@example.com,someoneelse@example.com,..."
(with linebreak behind me@example.com)
You get following headers:
From: me@example.com
Bcc:someone1@example.com,someoneelse@example.com,...