[PHP] safely using input for mail

2004-09-12 Thread David T-G
Hi, all -- I'd like some sanity checks on safely using input for sending mail. I'm developing a feature where one can click a 'mail this page' link, fill in the sender's and the recipient[s]'s addresses, and add comments in the body (eg Hey, Bill, what do you think of this chair?) and then

Re: [PHP] safely using input for mail

2004-09-12 Thread John Holmes
David T-G wrote: I'd like some sanity checks on safely using input for sending mail. I'm developing a feature where one can click a 'mail this page' link, fill in the sender's and the recipient[s]'s addresses, and add comments in the body (eg Hey, Bill, what do you think of this chair?) and then

Re: [PHP] safely using input for mail

2004-09-12 Thread David T-G
John, et al -- [Been a while! How ya been?] ...and then John Holmes said... % % David T-G wrote: % % I'd like some sanity checks on safely using input for sending mail. I'm ... % At the moment, I am running escapeshellcmd() on the From:, To:, Subject:, ... % his own bandwidth limits).

Re: [PHP] safely using input for mail

2004-09-12 Thread Justin French
On 13/09/2004, at 12:45 PM, John Holmes wrote: str_replace(array(\r,\n,'',$text) Is one way to do it. Typo John: str_replace(array(\r,\n),'',$text); :) --- Justin French http://indent.com.au -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] safely using input for mail

2004-09-12 Thread John Holmes
Justin French wrote: On 13/09/2004, at 12:45 PM, John Holmes wrote: str_replace(array(\r,\n,'',$text) Is one way to do it. Typo John: str_replace(array(\r,\n),'',$text); Yeah, that's why I said it was one way to do it and not the correct way to do it... come on people!! ;) Anyway, I uhmm... did