note 56287 added to ref.mail
| From: | oryan at zareste dot com | Date: | Mon, 29 Aug 2005 20:27:13 +0000 |
| Subject: | note 56287 added to ref.mail | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-94353@lists.php.net to get a copy of this message | ||
Note that 'e-mail injection' exploits don't need a 'return' byte at all, so
there's no use scanning for \n or \r. The safest way to prevent the exploit is to eregi()
search all fields for 'MIME-Version: