At 14:08 11.06.2003, Kevin Saenz said:
--------------------[snip]--------------------
>I think we are waaaay off topic.
>But how do you know if they are sending from a legit email account
>I know if I was a spammer I would be using made up ones like 
>[EMAIL PROTECTED] [EMAIL PROTECTED] how hard is it to forge
>email addresses? 
--------------------[snip]-------------------- 

It's extremely simple - just put any email address as "From" address:

mail('[EMAIL PROTECTED]',
     'Buy me!',
     'Here\'s some spam for you',
     "From: [EMAIL PROTECTED]" .
     "Reply-To: [EMAIL PROTECTED]" . 
     "X-Mailer: PHPSpam/" . phpversion() . "\r\n",
     "[EMAIL PROTECTED]");

The last parameter is a sendmail parameter which may be omitted (doesn't
work in safe mode anyway, see http://www.php.net/manual/en/function.mail.php).


-- 
   >O     Ernest E. Vogelsinger
   (\)    ICQ #13394035
    ^     http://www.vogelsinger.at/



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to