note 56287 deleted from ref.mail by dams
| From: | dams@php.net | Date: | Tue, 29 Nov 2005 10:38:35 +0000 |
| Subject: | note 56287 deleted from ref.mail by dams | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-99286@lists.php.net to get a copy of this message | ||
Note Submitter: oryan at zareste dot com
----
Note that 'e-mail injection' exploits don't need a 'return' byte at all, so
there's no use scanning for \n or \r. The safest way to prevent the exploit is to eregi()
search all fields for 'MIME-Version: