msherwoo Posted May 12, 2008 Share Posted May 12, 2008 In my testing with php mail, it appears that it allows you to use a "From" address of one domain (i.e. gmail.com) while sending from another (mysite.com). It seems like a situation ripe for abuse if I can make the sender look like anyone. Is this right? what keeps some one from impersonating someone else? Link to comment https://forums.phpfreaks.com/topic/105312-basic-question-on-php-mail/ Share on other sites More sharing options...
revraz Posted May 12, 2008 Share Posted May 12, 2008 Your ISP would probably not allow it to be sent unless it was an email that's part of your domain. But even if it does, both addresses show up in the Header of the email. Of course there are ways to spoof that as well. Link to comment https://forums.phpfreaks.com/topic/105312-basic-question-on-php-mail/#findComment-539295 Share on other sites More sharing options...
soycharliente Posted May 12, 2008 Share Posted May 12, 2008 The honor system Link to comment https://forums.phpfreaks.com/topic/105312-basic-question-on-php-mail/#findComment-539306 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.