Some spammer has figured out that a form on our site is ripe for
inserting their own headers and what-not into, despite my best efforts
to prevent that sort of thing. How can I shore up and secure the mail()
routine in my script so that this kind of thing is stopped?

My script checks for \r and \n chars that might be inserted into the
"To", "From", and other common header fields. If that char is found, it
exits the script. It also checks the email address against a regex for
unallowed characters and malformed addresses. Yet, the spam is still
coming through.

Can anyone recommend a surefire way of blocking these insertions?

Thanks,
Bob

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com


Community email addresses:
  Post message: [email protected]
  Subscribe:    [EMAIL PROTECTED]
  Unsubscribe:  [EMAIL PROTECTED]
  List owner:   [EMAIL PROTECTED]

Shortcut URL to this page:
  http://groups.yahoo.com/group/php-list




SPONSORED LINKS
Php mysql Job postings


YAHOO! GROUPS LINKS




Reply via email to