Many, many thanks Bob, the help is genuinely appreciated. I'll get the code onto a page pronto.
Much appreciated. Chris. > -----Original Message----- > From: [email protected] > [mailto:[EMAIL PROTECTED] On Behalf Of Bob > Sent: Tuesday, January 31, 2006 5:22 AM > To: [email protected] > Subject: Re: [php-list] Need help on a php form > > Hi Chris, > I couldn't convert the code you where using. > Here's some ideas. It's not finished by any means, and I've > left out actually sending the emails for testing. > You can either strip tags out, use preg_match or various > other things to make sure nothing can be injected that you don't want. > Since you're using a form, I've used $_POST instead of $_GET. > > If you look at the email, it will only allow the valid > characters, then checks if it's in the correct format, or be ignored. > You need to do this with every input. > > Example: with a name, you could just allow letters, spaces > and maybe a ' > It's up to you what you allow. > Bob. > Community email addresses: Post message: [email protected] Subscribe: [EMAIL PROTECTED] Unsubscribe: [EMAIL PROTECTED] List owner: [EMAIL PROTECTED] Shortcut URL to this page: http://groups.yahoo.com/group/php-list Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/php-list/ <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
