[office politics]

beware of email injection attacks. you should always validate your input server side.

Sending emails in PHP & email injection attacks

Spammers can hijack your seemingly innocuous looking mail form to send out spam. They do so by posting specially formatted data to your mail script. This is known as email injection or mail form spamming.

[Dr.House]

Originally Posted by office politics

beware of email injection attacks. you should always validate your input server side.

Sending emails in PHP & email injection*attacks

In short... use ReCaptcha or some other small captcha script for php to prevent this, though I know some of them are clever enough to jump over this now...

[office politics]

in short, you should check the strings for data that can do harm. please follow the link and read up. captcha's won't help in the senario they decribe. Your server could get blacklisted.

[Dr.House]

Originally Posted by office politics

in short, you should check the strings for data that can do harm. please follow the link and read up. captcha's won't help in the senario they decribe. Your server could get blacklisted.

My mistake, I thought we were just talking about those who use your script to send voluminous amounts of emails. I need to update a few of my php forms to use that (even though I haven't had an issue yet!)

[office politics]

Originally Posted by Dr.House

My mistake, I thought we were just talking about those who use your script to send voluminous amounts of emails.

you understand that that is what we are talking about? they input massive amounts of email addresses into the text box, click send, and a separate email gets sent to all the recipents.

[Dr.House]

Originally Posted by office politics

you understand that that is what we are talking about? they input massive amounts of email addresses into the text box, click send, and a separate email gets sent to all the recipents.

*facepalm* nevermind, forget it, dont know what I was thinking :-P