Mail Function

[redgunner]

$headers = 'From: user@domain.com' . "\r\n" .
   'Reply-To: user@domain.com' . "\r\n" .
   'X-Mailer: PHP/' . phpversion();

 

How do I replace the value user@domain.com with the value entered $_POST['emailaddress'] from the previous webpage with a form?

[Garethp]

$Mail = mysql_escape_string($_POST['emailaddress']);

 

$headers = 'From: ' . $Mail .  "\r\n" .

  'Reply-To: user@domain.com' . "\r\n" .

  'X-Mailer: PHP/' . phpversion();

[pornophobic]

$mail = mysql_real_escape_string($_POST['emailaddress']);
$headers = 'From: ' .$mail . "\r\n" .
   'Reply-To: ' . $mail . "\r\n" .
   'X-Mailer: PHP/' . phpversion();

 

@Garethp -

mysql_escape_string() has been deprecated.

Warning

This function has been DEPRECATED as of PHP 5.3.0 and REMOVED as of PHP 6.0.0. Relying on this feature is highly discouraged.

click

[Garethp]

$mail = mysql_real_escape_string($_POST['emailaddress']);
$headers = 'From: ' .$mail . "\r\n" .
   'Reply-To: ' . $mail . "\r\n" .
   'X-Mailer: PHP/' . phpversion();

 

@Garethp -

mysql_escape_string() has been deprecated.

Warning

This function has been DEPRECATED as of PHP 5.3.0 and REMOVED as of PHP 6.0.0. Relying on this feature is highly discouraged.

click

 

I'll stop using it when I have an alternate that does not rely on a database connection. When I use a database, I'll use real escape, but as a force of habit I use mysql_escape_string(); to sanatize even when I don't have Database needs

[Daniel0]

$Mail = mysql_escape_string($_POST['emailaddress']);

 

Uh... might I ask why you're doing that?

[Garethp]

$Mail = mysql_escape_string($_POST['emailaddress']);

 

Uh... might I ask why you're doing that?

 

Force of habit I guess. I 'spose it'd be easier to just do FROM: $_POST but when I started off I had some real problems with MySQL and Post functions unless I predeclared them first and used the alternative var. Since then it's just been a habit

[newbtophp]

add:

 

$headers = 'From: $emailaddress' . "\r\n" .
   'Reply-To: $emailaddress' . "\r\n" .
   'X-Mailer: PHP/' . phpversion();
$emailaddress = $_REQUEST['emailaddress'] ;

 

You'd now have to add emailaddress as the field name for the email address on the previous page.

[trq]

$Mail = mysql_escape_string($_POST['emailaddress']);

 

Uh... might I ask why you're doing that?

 

Force of habit I guess. I 'spose it'd be easier to just do FROM: $_POST but when I started off I had some real problems with MySQL and Post functions unless I predeclared them first and used the alternative var. Since then it's just been a habit

 

One that you should drop. Its of absolutely no benefit.

[Daniel0]

add:

 

$headers = 'From: $emailaddress' . "\r\n" .
   'Reply-To: $emailaddress' . "\r\n" .
   'X-Mailer: PHP/' . phpversion();
$emailaddress = $_REQUEST['emailaddress'] ;

 

You'd now have to add emailaddress as the field name for the email address on the previous page.

 

Won't work. Variables won't be interpolated in single quote delimited strings.