At 14:08 11.06.2003, Kevin Saenz said: --------------------[snip]-------------------- >I think we are waaaay off topic. >But how do you know if they are sending from a legit email account >I know if I was a spammer I would be using made up ones like >[EMAIL PROTECTED] [EMAIL PROTECTED] how hard is it to forge >email addresses? --------------------[snip]--------------------
It's extremely simple - just put any email address as "From" address: mail('[EMAIL PROTECTED]', 'Buy me!', 'Here\'s some spam for you', "From: [EMAIL PROTECTED]" . "Reply-To: [EMAIL PROTECTED]" . "X-Mailer: PHPSpam/" . phpversion() . "\r\n", "[EMAIL PROTECTED]"); The last parameter is a sendmail parameter which may be omitted (doesn't work in safe mode anyway, see http://www.php.net/manual/en/function.mail.php). -- >O Ernest E. Vogelsinger (\) ICQ #13394035 ^ http://www.vogelsinger.at/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php