Re: [PHP] security with email data entries

2001-08-15 Thread ReDucTor

well you add to your .forward file or .qmail-default file if you use qmail
to exec it(sends the email)

then you do something like this..


- Original Message -
From: "Chris Hayes" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, August 16, 2001 1:20 AM
Subject: [PHP] security with email data entries


> Hi group!
> i have this script to read data in POP emails and put them in a database.
>
> I would like to know if anybody knows how people would try to get around
the
> tests I've build in.
>
> - normal registration by web form (password scrambled), with confirmation
> through email response
> - the first header starting with 'From:' in the mail is scanned for a the
> email addtess and then i check whether the email address is in the
database
> - the mail contains the non-scrambled username and password, which are
also
> checked
> - there must be a magic word in the email subject (to prevent SPAM mail
> confusing my script)
>
> Oh and I intend only to disclose the email address to people i know.
>
> thanks,
> Chris
>
>
>
>
>
>
>
> 
> --  C.Hayes  Droevendaal 35  6708 PB Wageningen  the Netherlands  --
> 
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




[PHP] security with email data entries

2001-08-15 Thread Chris Hayes

Hi group!
i have this script to read data in POP emails and put them in a database.

I would like to know if anybody knows how people would try to get around the 
tests I've build in.

- normal registration by web form (password scrambled), with confirmation 
through email response
- the first header starting with 'From:' in the mail is scanned for a the 
email addtess and then i check whether the email address is in the database
- the mail contains the non-scrambled username and password, which are also 
checked
- there must be a magic word in the email subject (to prevent SPAM mail 
confusing my script)

Oh and I intend only to disclose the email address to people i know.

thanks,
Chris








--  C.Hayes  Droevendaal 35  6708 PB Wageningen  the Netherlands  --


 

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]